Arnel Reyes

About Arnel Reyes

Fondly known as ACR, is a recognized & seasoned information security consultant and NetSec/CloudSec/AppSec/DataSec architect - mastered in years of industry experience. ACR leads an army of Ethical Hackers & IT Security Consultants. ACR\'s mission is to converge Offensive and Defensive security through R&D by leveraging the power of AI & ML to advance Cybersecurity, including Web 3.0 and Blockchain security. It aims to embed security into the native fabric of each application’s DNA prior to software release and to enforce robust, layered defense-in-depth mechanisms combined with automated guardrails ensure comprehensive protection of critical information assets. He has developed blended security strategies to support this approach:* Application, System, and Infrastructure Security Assurance (ASISA), an offensive security strategy focused on application, database, system, and network pentest.* Network, Endpoint, Application, and Data Security (NEADS), a holistic cloud security defense in-depth strategy that combines defensive & offensive security techniques to protect data.* Application Security Assurance Playbook, a DevSecOps step-by-step implementation guide for integrating security assessment tools (e.g, SAST, DAST, IAST, SCA, OSA etc.) into the CI/CD pipeline; comprehensive threat, vuln & risk assessment analysis such as PenTest, Sec. Arch. Review, Threat Modeling, Code Review, ASVS, SAMM; enables informed decision-making Arch. Review Board (ARB) & Product Owner for software release; and formal risk acceptance by the Mgmt. based on analysis conducted by Risk Team.* Penetration Testing Made Simple for Application Developers, a specially curated self-assessment (“AppSec Testing”) to validate secure coding and application security best practices implementation.* Penetration Testing Automation Framework, an innovative and thoroughly vetted PoC pentest automation tool that leverages modern tools & streamlines the pentest process into a cohesive testing pipeline.* Vulnerability and Risk Management Strategy, a proactive security approach designed to assess, prioritize, and remediate vulns where remediation efforts are aligned with the org.’s risk tolerance & defined remediation timeline policy.ACR holds multiple certifications: CISSP, LPT MASTER, CEH, CHFI, ECSA, ITIL, MCTS, MCITP∫SA, MCITP∫EA, MCITP∫DBA, CCNA-Sec, CCNP-Sec, FSCE, QGCS and more.ACR has held various mgmt. positions. To date, he has served as CTO, Cybersecurity Dir, Sr. Security Manager, Principal Cybersecurity Arch.More about ACR:

Experience

1. Principal Security Architect (Appsec, Cloudsec, Penetration Testing, Security Testing Automation)

   NCR Voyix

   Oct 2023 — Present

   Provide guaranteed secured software and applications for iNCRedible clients.

Skills

• Vulnerability Assessment
• Operating Systems
• Information Security
• Ccna
• Penetration Testing
• Linux
• Servers
• Itil
• Security
• Project Management
• Networking
• Firewalls
• Cisco Technologies
• Computer Security
• Routers
• Vpn