Hugo Cañedo

About Hugo Cañedo

Mission-driven cybersecurity professional and Navy Corpsman Veteran with over 10 years of experience operating in high-risk, time-sensitive environments. Currently focused on offensive security, penetration testing, and compliance-driven risk assessment within defense and regulated environments. Recently earned the eLearnSecurity Junior Penetration Tester (eJPT) certification, demonstrating hands-on experience across network and web application security, credential attacks, privilege escalation, and lateral movement within segmented networks.Proven leadership experience managing and directing over 80 personnel in dynamic operational environments requiring rapid decision-making, accountability, and execution under pressure. I bring a disciplined, methodical approach to cybersecurity operations, with a focus on structured enumeration, attack path validation, and efficient exploitation aligned with real-world adversarial behavior.My technical background includes systems administration and Linux, combined with hands-on offensive security experience across network and web application environments. I focus on identifying high-value attack vectors such as credential reuse, misconfigurations, and exposed services, with an emphasis on methodology over tool dependency.I am currently expanding my skill set in advanced penetration testing and red team operations while building knowledge in governance, risk, and compliance (GRC), with a focus on CMMC assessment preparation and supporting organizations within the Defense Industrial Base (DIB). I am particularly interested in how offensive security findings translate into compliance gaps and actionable risk mitigation.I am fully engaged in my current role and the work I’m doing, while also open to opportunities to collaborate, freelance, and contribute to cybersecurity projects. I’m especially interested in working with defense contractors, government agencies, and security teams to continue building hands-on experience and expanding my network within high-assurance and compliance-driven environments.

Experience

1. Field Engineer & Noc Security Specialist

   Systems Integration Inc

   Sep 2025 — Present

   Triage and respond to endpoint and identity-based alerts using EDR platforms (SentinelOne, Huntress), identifying and mitigating potential security incidents across client environments • Lead phishing email analysis and response workflow, serving as a primary decision point for email security filtering, restoration, and denial • Perform security investigations by validating alerts, analyzing indicators of compromise (IOCs), and escalating or remediating threats as appropriate • Conduct vulnerability assessments using Nessus to identify and prioritize security weaknesses across client environments • Perform onsite network security walkthroughs for prospective clients, evaluating infrastructure and providing practical, security-focused recommendations • Support CMMC-aligned client engagements through documentation, assessment support, and process continuity efforts • Evaluate and implement security solutions across client environments, ensuring alignment with best practices and compliance requirements • Develop technical documentation and recommendations to support solution design, onboarding, and ongoing security improvements • Create internal case studies to keep technical teams informed on phishing techniques, attack trends, and emerging threats • Monitor threat intelligence sources (RSS feeds, advisories, CVEs) and apply relevant updates to firewall and security controls • Maintain SOPs and internal workflows to improve response consistency and operational efficiency • Deliver internal and client-facing training on security processes and threat awareness • Apply an adversarial mindset to improve detection and response, focusing on credential abuse, phishing, and lateral movement

Education

• Per Scholas

  Cloud Support

  2019 — 2020

• Fullstack Academy

  Cybersecurity Analytics

• New York Business Institute

  System Administration/Network Engineering

  2018 — 2019

• Western Governors University

  Cyber Security and Information Assurance