Melvin Moreno

About Melvin Moreno

Certifications: Offensive Security Certified Professional (OSCP), CompTIA Security+Melvin is currently a Cybersecurity Consultant at Deloitte Consulting with a focus on vulnerability tracking, compliance, and risk mitigation/remediation. Melvin studied Computer Science with a minor in Information Systems Management while attending Auburn University where he gained technical skills in cybersecurity and compliance while also sharpening soft-skills like collaboration, presentation, and public speaking. He also participated and became a finalist in the Auburn University’s Philip Lutzenkirchen Public Speaking competition out of over participants. Recently, Melvin has started an online Masters program at Georgia Tech.Currently, Melvin has experience conducting Dynamic Application Security Testing (DAST), Static Application Security Testing (SAST), and Software Composition Analysis (SCA) scans. He utilizes various tools as a part of his testing including Rapid7, Fortify, Snyk, Burp Suite, OWASP Dependency Checker, and Kali Linux tools (autorecon, linpeas, etc.). Melvin also has experience with federal, state, and local compliance standards in regards to cybersecurity. He has followed guidelines such as NIST SP 800-53, MARS-E 2.2, and other federal guidelines to ensure effective and efficient security recommendations. As a lifelong learner, Melvin continues to embrace the ongoing changes in technological landscapes to ensure security posterity amongst systems. He continues to do so by staying up-to-date on pertinent vulnerabilities and cultivating his skills in various cybersecurity tools and processes.

Experience

1. Cybersecurity Consultant

   Deloitte

   May 2025 — Present · Huntsville, AL, US

   Cyber & Strategic Risk Consultant- Leads dynamic/static scanning, penetration testing, and vulnerability management for web applications and standalone APIs across State, Local, and Higher Education (SLHE) accounts- Performs end-to-end security assessments including scanning, exploitation, reporting, and remediation tracking- Analyzes and triages Data Loss Prevention (DLP) alerts to identify false positives and escalate genuine incidents- Researches emerging CVEs and public Proofs of Concept (PoCs) to assess risk and support timely remediation efforts- Collaborates with cross-functional teams to enhance client security posture and ensure regulatory compliance- Utilizes Kali Linux, SAST, DAST, and SCA tooling to conduct black box exploitation testing.

Education

• Auburn University

  Bachelor of Science - BS, Computer Science

  2020 — 2023

• Georgia Institute of Technology

  Master of Science - MS, Cybersecurity