Marco Belmonte

About Marco Belmonte

If your organization is looking for a person who has no problem interacting with…

Experience

1. Information Security Manager, Americas

   Ria Money Transfer

   Mar 2012 — Present

   Responsibilities: I lead Ria’s security team and develop global security systems from layers 1 to 7. I perform web application penetration tests and engage in network and system audits as mandated by Ria’s Security Program (50% of which I wrote or revised). My team responds to all security incidents and conducts forensic investigations on devices which have been used to commit fraud or other nefarious things. We either built or manage (or both) all of the proxy servers, web application firewalls, intrusion detection systems and and are still expected to stay up on the latest emerging financial malware, audit the newest build of our in-house applications from our global software development team and respond to external network attacks using deep packet inspection from one of our network recorders (which we built from scratch since no company wants to pay a “bajillion” dollars to some vend… um… what I mean is—to improve our self-esteem). Technology: Enough Linux to kill an elephant. Client-side software applications consist of Metasploit, Burp, IDA Pro and one really big directory full of tools you have to compile yourself. On the server-side I find myself using Suricata, netsniff-ng (for full packet capture), Yara and Bro. I deploy our customized security solutions using a combination of virtual (VMware) and bare metal (Dell) servers and I pride myself on intimately understanding when either is the appropriate choice.