M.S. Cybersecurity · NYU · Open to opportunities

Angelo
Vasquez

8+ years leading technology operations, currently at Synchrony as a Systems Engineer while completing my M.S. in Cybersecurity at NYU. I build production AI tools, database systems, and security workflows — bridging hands-on technical depth with senior leadership communication.

8+
Years Experience
3.9
GPA
20+
Incidents / Day
$1.8M
Revenue Led
SCROLL
AV CYBERANGEL SECURITY · AI · ENGINEERING
Work

Projects

Production systems across AI, security, databases, and data science. Each one is real and documented.

● Live 🗄️
Service Ticket Tracker

Full-stack helpdesk with a 7-table normalized MySQL database, role-based agent management, SLA enforcement, audit-trail status history, and an Analytics dashboard. Includes stored procedures, triggers, views, and functions — all running live on production hosting.

PHPMySQLSQL ViewsTriggersStored ProceduresPDO Transactions3-Tier Architecture
View Live App →
● Live 🔍
SOC RAG Assistant

A Retrieval-Augmented Generation chatbot for SOC analysts. Ask questions in plain English — it searches your knowledge base using FAISS vector search and responds with structured triage guidance. Knowledge packs cover Splunk SPL, SOC playbooks, AWS security, IAM, and MITRE ATT&CK.

PythonLangChainFAISSOpenAIStreamlitRAGHuggingFace
See Live Demo ↓
◈ Data Science
Energy Load Prediction Model

Linear regression model predicting building heating and cooling loads from structural features. Full pipeline: data cleaning, feature engineering, model training, residual analysis, and performance evaluation. Built and deployed on GitHub.

Pythonpandasscikit-learnJupyterLinear RegressionData Visualization
View on GitHub →
⬡ Security ☁️
Microsoft Azure SIEM Build

Deployed a cloud SIEM on Azure to collect security events, validate alerting workflows, and build triage runbooks. Bridges academic security concepts with real cloud infrastructure hands-on.

Microsoft AzureMicrosoft SentinelKQLLog AnalyticsSIEM
Request Write-up →
◐ In Progress 🤖
AI Health Coach App

Apple Watch + iPhone app leveraging HealthKit and optional Dexcom CGM integration. Four-layer architecture with a Claude API-powered coaching feature for personalized health prevention guidance.

HEALTHCOACH 9:41
Good morning, Angelo
Prevention score: 84 / 100
68
HR
7.4k
STEPS
😴
7h
SLEEP
🩸
94
CGM
CLAUDE COACH
Glucose spiked at 8AM — consider a walk after breakfast. HRV trend looks solid.
72
BPM
Coach: Walk now — glucose trending up
WatchOS
4-LAYER ARCH
HealthKit Claude API Dexcom CGM Swift / WatchOS
SwiftHealthKitClaude APIWatchOSDexcom CGM
In Progress →
⬡ Security Lab 📡
Packet Sniffing & Spoofing

SEED Labs implementation using Python and Scapy inside Docker containers. Network-layer packet capture, filtering, analysis, and ARP/IP spoofing in a controlled lab environment.

PythonScapyDockerNetwork SecuritySEED Labs
Request Write-up →
◐ In Progress 🛡️
AWS Threat Detection Lab

Live AWS threat detection environment using GuardDuty, CloudTrail, and SNS alerting. Simulates real attack scenarios — credential stuffing, S3 exposure, IAM abuse — and maps each finding to a MITRE ATT&CK technique with a documented triage runbook.

AWS GuardDutyCloudTrailSNSCloudWatchIAMS3MITRE ATT&CK
View on GitHub →
◐ In Progress 🪤
AWS Honeytoken Tripwire

Deception-based detection system using planted IAM credentials, S3 objects, and EC2 keypairs as honeytokens. Any access attempt triggers CloudTrail → Lambda → immediate SNS alert with full context — IP, user-agent, region, and timestamp. Includes a response playbook for each tripwire type.

AWS LambdaCloudTrailSNSIAMS3PythonDeception Detection
View on GitHub →
◐ In Progress 🏗️
Terraform AWS Security Baseline

Infrastructure-as-code that provisions a secure AWS environment from scratch — VPC with private/public subnets, least-privilege IAM roles, locked-down S3 buckets, CloudTrail logging, and GuardDuty enabled by default. Fully version-controlled and redeployable in minutes.

TerraformHCLAWS VPCIAMS3GuardDutyCloudTrailIaC
View on GitHub →
◐ In Progress 📊
AWS Cloud Hardening Audit

Automated Python tool that queries AWS APIs and benchmarks your account against CIS AWS controls — S3 policies, IAM password policy, MFA enforcement, root account usage, open security groups, and CloudTrail status. Outputs a scored HTML report with pass/warn/fail per control and remediation steps.

Pythonboto3CIS BenchmarksAWS ConfigSecurity HubIAMCompliance
View on GitHub →
⬡ Security · AI 🔗
Identity Bridge

SOC intelligence tool unifying physical identity (LenelS2 OnGuard PACS) with digital identity (SSO/Active Directory). Features real-time identity resolution, automatic SIEM alert enrichment with physical context, and cross-correlation anomaly detection — flagging impossible travel, off-hours access, and credential anomalies.

OnGuard OpenAccess APIActive DirectoryPythonSIEMIdentity ResolutionAnomaly DetectionPACS Integration
View Live Demo →
AI Engineering

Generative AI in Action

Live demonstrations of the AI tools I've built — from SOC analyst assistants to RAG pipelines and agentic workflows.

💬 SOC Assistant Demo
🔄 RAG Pipeline
{ } How It Works

SOC RAG Assistant — powered by LangChain · FAISS · HuggingFace all-MiniLM-L6-v2 · GPT-4o-mini. Running live on Streamlit Cloud.

LIVE · STREAMLIT CLOUD

Ask anything about phishing triage, Splunk SPL hunting queries, MITRE ATT&CK mapping, AWS CloudTrail events, or IAM fundamentals — answers pulled from curated SOC knowledge packs, not general training data.

▶ Launch Live App →

Opens in new tab · Selectable knowledge packs · Evidence sources · Conversation history

How the SOC RAG Assistant processes your question — from raw text to structured analyst guidance:

📝
1. Question
Analyst asks a question in plain English
🔢
2. Embed
HuggingFace converts question to a vector (numbers)
🔍
3. Search
FAISS finds most relevant knowledge chunks via similarity
🤖
4. Generate
GPT-4o-mini answers using ONLY retrieved context

KNOWLEDGE PACKS LOADED

✓ SOC Playbooks ✓ Splunk SPL Hunting ✓ AWS Security ✓ IAM Fundamentals ✓ MITRE ATT&CK ✓ Cyber Fundamentals

RAG pipeline architecture — from analyst query to structured SOC output:

1. QUERY 2. EMBED 3. RETRIEVE 4. AUGMENT 5. GENERATE Analyst plain-English query HuggingFace all-MiniLM-L6-v2 FAISS Vector DB MMR similarity · k=3 Prompt Builder context injection GPT-4o-mini structured output KNOWLEDGE PACKS SOC Playbooks · Splunk SPL AWS Security · IAM MITRE ATT&CK · Fundamentals chunked Structured output Triage steps · SPL query · ATT&CK ID · Confidence chunk_size=700 · overlap=120 · fetch_k=8 · lambda=0.55

The key innovation: instead of relying on the LLM's general knowledge, it only answers from your curated documents — making responses accurate, auditable, and domain-specific.

Background

Experience

8+ years across IT operations, enterprise security, and AI enablement in regulated and high-volume environments.

Jan 2025 — Present
Jan 2025 — Present
Consultant, Systems Engineer
Synchrony · Stamford, CT
  • Administer secure password resets, MFA, and identity governance while preventing unauthorized activity
  • Resolve 20+ incidents/day across tools and stakeholders; document outcomes with clear, actionable updates
  • Deploy and maintain enterprise software with a compliance-first approach; support secure decommissioning
Jun 2016 — Dec 2024
Jun 2016 — Dec 2024
IT Customer Lead
AltaGIT · Bronx, NY
  • Configured and secured networks, routers, switches, endpoints, and wireless; macOS/Windows imaging
  • Used Splunk for anomaly detection and troubleshooting; supported encryption/backups for resilience
Jun 2017 — Jan 2025
Jun 2017 — Jan 2025
General Manager / Operations Manager
El Nuevo Pollo Sabroso 1 & 2 · Bronx, NY
  • Led a $1.8M+ revenue operation; improved profitability 10% through process redesign and execution
  • Scaled digital ordering to ~1,052 online transactions/month via Otter + Lightspeed POS
  • Managed 17 vendors and cross-functional teams; negotiated pricing, standardized workflows
Capabilities

Skills

Technical depth across security operations, AI engineering, development, and infrastructure.

🔐 Security Operations
IAM / MFA Identity Gov. Incident Response Splunk / SIEM Network Security KQL MITRE ATT&CK Triage Runbooks
🤖 AI Engineering
LangChain RAG Pipelines FAISS Claude API OpenAI Prompt Engineering HuggingFace Vector Search Streamlit
💻 Development
Python pandas / scikit-learn PHP MySQL SQL JavaScript Swift HTML / CSS Jupyter
☁️ Infrastructure
Microsoft Azure Microsoft Sentinel AWS Docker Linux / CLI Log Analytics Endpoint Mgmt Streamlit Cloud
Credentials

Certifications

Active certifications and completed training programs.

🛡️
EC-Council C|CT
Certified Cybersecurity Technician · Active
🔒
CompTIA Security+
SY0-701 · Active
🌐
CompTIA Network+
In Progress · WIP
🤖
Generative AI for Cybersecurity
Completed
🐧
Intro to Linux
NCAE-C · University of West Florida
🐍
Kaggle Python & Programming
Kaggle · Completed
Academic

Education

Strong academic record across three institutions.

M.S. Cybersecurity
New York University (NYU)
Expected May 2027
B.A. Sociology
Lehman College
Completed
GPA 3.9
A.A. Liberal Arts
Westchester Community College
Completed
GPA 3.9
Get In Touch

Let's build
something.

Open to senior leadership conversations, full-time roles in cybersecurity or AI engineering, and collaboration on security tooling or GenAI projects.

Send a Message

✓ Message sent! I'll get back to you within 24–48 hours.