DEFENSIVE CYBERSECURITY • IAM • HOMELAB ENGINEERING

Luis Baldera | Security Portfolio & Labs

Cybersecurity professional & systems engineer documenting practical cloud security architectures, Zero Trust architecture, enterprise identity management (Entra ID), and hands-on detection engineering.

Santo Domingo, Dominican Republic luis@lbcyberdefense.com
ISC2 CC Microsoft SC-900 Microsoft Defender XDR Wazuh Threat Detection Entra ID Cloudflare DNS & Routing M365 Data Security Microsoft Sentinel SIEM & KQL Sysmon Telemetry & Logs Infrastructure Docker & Containers

Security Projects & Lab Environments

DEFENSIVE FRAMEWORK

M365 & Entra ID Security Hardening

Defensive security and data protection project focused on the Microsoft ecosystem (Entra ID, SharePoint, Teams, and Intune). Developed frameworks for Security Posture Assessment, IAM policy design, endpoint/Intune hardening, and incident readiness.

Entra ID M365 Data Protection Intune Hardening Conditional Access Security Posture
PROXMOX LAB

Enterprise Virtualization & Active Directory Lab

Multi-tier Proxmox home lab replicating enterprise IT environments, including a Windows Server domain controller managing Active Directory, DNS, and DHCP, joined Windows 10/11 workstations, and Group Policy configuration for identity and endpoint scenarios.

Proxmox VE Windows Server DC Active Directory Group Policy (GPO)
TELEMETRY & LOGGING

Sysmon & Endpoint Log Analysis

Configured intermediate Sysmon profiles on lab endpoints to capture deep process creation, network connection, and privilege escalation telemetry. Practice proactive log parsing and anomaly detection against simulated suspicious techniques.

Sysmon Windows Event Logs Threat Detection Telemetry
KNOWLEDGE PORTFOLIO

Obsidian Security Vault & Labs

Technical knowledge vault documenting enterprise PKI, Entra ID, network isolation, and Sysmon telemetry. Explore live write-ups including pfSense + Proxmox and Caddy TLS Reverse Proxy.

pfSense Caddy TLS Proxmox VE Obsidian
Read Lab Write-ups

About Me

I am an IT professional with 8+ years of enterprise support and identity/access administration experience, specializing in data security operations, Microsoft Defender XDR, Active Directory, Entra ID, and least-privilege governance across Microsoft 365.

Mission: Building verifiable security defenses through hands-on virtualization labs, endpoint telemetry inspection, robust identity boundaries, and transparent technical documentation.
PRIMARY SPECIALIZATION

Data Security, IAM & Microsoft 365 Security

EXPERIENCE DEPTH

8+ Years Enterprise IT & Identity Support

LANGUAGES

English (Fluent) • Spanish (Native)

Core Competencies

Security Monitoring & Triage

Microsoft Defender XDR Security Alert Triage & Escalation Sysmon Log Analysis Incident Response Coordination Endpoint & Policy Hardening (Intune, GPO) DLP / Data Security Posture (Purview)

Identity & Access Management (IAM)

Microsoft Entra ID (Azure AD) Active Directory (AD DS) Conditional Access Multi-Factor Authentication (MFA) Least-Privilege Enforcement Access, Permissions & Exposure Review

Microsoft 365 Data Security

SharePoint Security & Permissions OneDrive Access Governance Exchange Online Protection Microsoft Teams Security Windows Server Administration Proxmox Virtualization

Automation, ITSM & Compliance

PowerShell Scripting & Automation ServiceNow ITSM & Dashboards Jira Service Management Zendesk SLA Management Audit Documentation & SOPs Cross-Functional Collaboration

Professional Credentials

ISC2 Certified in Cybersecurity (CC)

Certified in Cybersecurity (CC)

ISC2 • Verified September 2026

Official foundational credential from (ISC)² validating critical foundational cybersecurity concepts across access controls, network security, security operations, and incident response governance.

Verify Credential
Microsoft Certified: Azure Fundamentals

Azure Fundamentals

Microsoft • Verified September 2026

Demonstrates foundational knowledge of cloud services and how those services are provided with Microsoft Azure.

Verify Credential
Microsoft Certified: Security, Compliance, and Identity Fundamentals

Security, Compliance, and Identity Fundamentals

Microsoft • Verified September 2026

Demonstrates foundational knowledge of security, compliance, and identity concepts on Microsoft platforms including Entra ID, Microsoft Purview DLP, Microsoft Defender, and Azure governance.

Verify Credential
WES International Academic Qualifications

International Academic Qualifications

World Education Services (WES) • Verified May 2023

Verified evaluation of international academic credentials, confirming equivalent standards for international professional and academic qualifications.

Verify Credential

Professional Background

Curriculum Vitae & Experience Record

Explore my complete chronological career history, including enterprise support engineering at Abt Global, experience as a Security Analyst Level 1 consultant, academic degree details, and active certifications.

Open Full Resume
RECENT ROLE

IT Support Engineer

Abt Global (2019 – Present)

EDUCATION

B.S. Informatics Engineering

UAH (Caracas) • Evaluated by WES

CERTIFICATIONS

ISC2 CC (Certified)

Microsoft SC-900 (Certified)

Connect & Profiles