July 2025–present
City of Coral Gables
Network Security Analyst · Security Engineering & Automation
Engineer municipal security workflows across telemetry, identity, endpoints and incident response, with custom automation and Rust tooling that connect system design to operational use.
Architecture & responsibilities
Security platform integration
Designed telemetry and automated-response workflows that connect a SIEM/SOAR platform with endpoint, identity and service-management systems. Built the integration layer with Python, REST APIs and webhooks.
From raw events to operational decisions
Built log parsers and normalization pipelines for identity, endpoint and core infrastructure signals. Connected detections to controlled response steps, analyst workflows and ticket creation rather than leaving alerts as disconnected records.
Rust tools for sensitive workflows
Designed Rust desktop tooling for encrypted evidence handling and a separate security-diagnostics platform. The work combined analyst usability, system integration and explicit handling of protected information.
Identity and endpoint engineering
Integrated Microsoft 365, Entra ID and Intune into security workflows, including identity actions and endpoint response. Worked across authentication behavior, permissions, telemetry and administrative APIs.
Reliability and diagnostic depth
Developed service-health monitoring and automated escalation workflows. Used log analysis and Linux runtime configuration to investigate system behavior and improve the repeatability of diagnostic work.
AI and automation boundaries
Reviewed security controls around coding agents, local model tooling, API automation and endpoint execution. Focused on the boundary between an automation capability and the authority required to use it.








