Erwin B.

About Erwin B.

I’m a cybersecurity professional with Clearance and a military-hardened work ethic, hands-on penetration testing skills, and a passion for securing systems before they’re breached. I specialize in uncovering vulnerabilities, automating security assessments, and translating technical findings into actionable insights. Seeking an opportunity in Cybersecurity. Highlights:Proficient in tools like Burp Suite, Nessus, Nmap, Metasploit, and OWASP ZAPExperienced in vulnerability scanning, web app pentesting, and OSINT investigationsStrong foundation in Python scripting, STIG hardening, and security automationFamiliar with compliance standards including HIPAA, PCI-DSS, and NISTFormer military tech with operational risk management experience I’ve contributed to Navy cybersecurity operations and am now focused on helping businesses harden their defenses through ethical hacking and red team tactics. My goal? Join a mission-driven team where I can grow, contribute to cyber resilience, and help build proactive security programs that scale.Let’s connect if you\'re looking for a dedicated, adaptable, and security-focused professional ready to make impact.

Experience

1. Cyber Security Engineer

   Fylaxcyber Inc

   Nov 2025 — Present

   Network Reconnaissance: Utilize Nmap to perform active network discovery, verifying IP scope and identifying open ports/services across production environments.Vulnerability Discovery: Execute targeted DAST(Blackduck Defensics) and manual assessments using Nessus Pro(ACAS) to identify exploitable vulnerabilities in production systems.Execute RMF Step 4 (Assess) by performing deep-dive security assessments on embedded systems using Tenable Nessus and DISA STIG hardening to validate control effectiveness for ATO decisions.Conduct structured and \"dumb\" fuzzing(Blackduck Defensics) against embedded firmware and applications to identify memory corruption and logic flaws that bypass traditional security controls.Synthesize complex fuzzing results and technical scan data into executive-level risk summaries, Security Assessment Reports (SARs), and POA & Ms. Prioritized high-impact remediation strategies based on mission criticality rather than raw vulnerability volume.

Education

• California Institute of Applied Technology

  Associate's degree, Computer Engineering Technology/Technician

• University of San Diego

  Master's degree, Cybersecurity engineering

• California Institute of Applied Technology

  Bachelor of Applied Science - BASc, Computer Information Systems – Cybersecurity Degree