Security engineering leadership for regulated environments | Remote roles + advisory
Cybersecurity Engineer and Trusted Security PaRTNER
I help teams reduce security risk fast, without drama or jargon. My work sits at the intersection of vulnerability remediation execution, security automation, cloud security, and risk governance, so leaders can ship products and pass audits with confidence.
I’ve supported high-scale environments and regulated industries, and I translate complex security into clear, practical actions that actually get done.
- Experience: Google, IBM, Wells Fargo, U.S. Navy (Submarines)
- Focus areas: Vulnerability remediation, automation, cloud security, encryption/key management, compliance readiness
- Credentials: CISSP, MSCY, MSOL, CSPO
- Languages: English + Spanish (native)
What I do
For employers (remote/hybrid):
- Lead and execute vulnerability remediation programs across multiple teams and platforms
- Build automation and repeatable processes that reduce operational risk and improve reporting accuracy
- Partner with engineering, infra, and governance teams to drive measurable reduction in exposure
For clients (consulting/managed services):
- Rapid security posture assessment (what’s risky, what’s noise, what to fix first)
- Remediation execution plan + governance (so fixes stick and don’t regress)
- Cloud and data protection guidance (keys, secrets, encryption, access controls)
- Audit readiness support (SOC 2/ISO-style controls mapping and evidence strategy)
Who I work with
I’m a strong fit for:
- Hiring managers building security engineering teams (vulnerability management, cloud security, platform security, data protection)
- Startups and growing businesses that need enterprise-grade security without enterprise bureaucracy
- Minority-owned and women-owned businesses that want a practical security partner who communicates clearly and respects constraints
- Consultancies and MSPs that need a senior security engineer to strengthen delivery
How I work
- Plain language: clear priorities, clear owners, clear deadlines
- Outcome-driven: fewer critical exposures, faster remediation cycles, stronger evidence for audits
- Built for reality: I design security that teams can actually maintain
- High trust: direct communication, clean documentation, no surprises
I’m a U.S. Navy Submarine Veteran and a cybersecurity professional who has worked across large-scale enterprise environments and high accountability teams. I bring a bias for repeatable process, accountability, and execution, not slide decks.
Call to action
If you’re hiring for a remote security engineering role, or you want help reducing risk and improving your security posture, reach out:
- Contact: https://alfecorona.com/contact
- LinkedIn: https://www.linkedin.com/in/alfecorona/
- Schedule: https://calendly.com/alfecorona/10-mins