Hello, I am
Ricardo Kuyoc

Blue Diamond Hotels & Resorts

Cybersecurity Analyst | November 2023 - Now

• Analyzed security alerts and threats, providing actionable remediation steps to mitigate risks and reduce incident resolution time.

• Configured and administered CrowdStrike Falcon console to enforce endpoint security policies, including USB access control, application whitelisting, DLP (Data Loss Prevention) and Host-based Firewall for malicious websites.

• Created and maintained cybersecurity documentation, including playbooks, policies, standards, and procedures to standardize incident response and operational workflows.

• Led recertification of the corporate website and first-time certification of hotel systems for PCI DSS, ensuring full compliance with payment security standards.

• Collaborated in the development of the organization’s cybersecurity strategy, aligning tools and processes with business objectives.

Effective Monitoring, Investigations, and Responses with Splunk

SOC Analyst | April 2023 - September 2023

• Utilized Splunk to analyze logs and identify suspicious file extensions and binaries, the source web address, and the PowerShell command used for malicious execution. 

• Employed CyberChef to decode hidden web addresses and Virustotal to analyze the hash of a malicious script. 

• Monitored suspicious activities, including spear phishing attacks and malware infections, identifying key indicators of compromise. 

• Analyzed and interpreted logs using Splunk and other security tools to investigate a cyber-attack where a website was defaced and extracted critical information about the cyberattacker.

Wireshark Traffic Analysis

SOC Analyst | March 2023

• Analyzed network logs to detect anomalies and malicious activities on network traffic. 

• Investigated cleartext protocols, such as FTP and HTTP, for security issues like MITM attacks and credential stealing. 

• Conducted HTTP analysis to detect web attacks, and data exfiltration, using methods like identifying request methods and response status codes. 

Research with MITRE Framework

 SOC Analyst | February 2023

• Conducted research on MITRE ATT&CK and D3FEND to stay up to date with the latest trends and best practices. 

• Developed practical skills utilizing threat intelligence to identify and defend against real-world malware, techniques, APTs and mitigation procedures. 

Freelance Remote Technician Support

 IT Help Desk Technician | January 2022 - December 2022

• Provided technical assistance and troubleshooting for printers, hardware, software, and Windows OS to a diverse range of clients using TeamViewer.

• Achieved high levels of customer satisfaction through remote support and efficient problem-solving skills.