Javier Romero

Currently running a multi-SDLC application security testing provider, with a deep focus on quality, hybrid execution, and going beyond automated scanners. Cybersecurity professional with academic training and work experience on security consultancy. In 2004, as part of his academic formation on consultancy, he wrote a paper, in order to grade his second GIAC (Gold) certification. Field experience on consultancy since 2008. He has been working to JaCkSecurity, a Peruvian information security company, by serving to the financial, security & protection, insurance, mutual-funding, retirement funding, stock exchange, newspaper, secure printing, cash machine, retail, warehouse store, factory and critical infrastructure (petroleum, power distribution, gas pipeline, telecommunication, international transactions) both on public & private sector, and other government bureaus (justice, comptroller, administration, and central banking) in Peru, Honduras & Ecuador, leading & executing hardcore projects on improved contracts (SLA), reputational crisis cyber support, network forensics, computer emergencies, ethical hacking, vulnerability assessments, social-engineering, business continuity & information security management systems, personal data protection laws, systems security hardening, network security monitoring and securing SDLC, all this for good organizational governance initiatives, regulations and incidents.

Proudly served to the common interests between the CISSPs experts and the corporate managers in Peru. Visit https://www.isc2peruchapter.org

Colaboré con los colegas interesados en ingresar al capítulo. Aquí no sólo serví voluntariamente, también aprendí a desarrollar nuevos talentos que antes no tenía. Para los futuros interesados, esta es una buena posición para alguien que desea convencerse genuinamente que desea servir personas.

A FIRST Rep votes in the FIRST's annual conference, keeps special information and access to FIRST web site, and is the first contact of the CSIRT.

My main duties were to protect the datacenter and to coordinate and resolve network security incidents with the customer's community. I supported many other inner activities with sales, mktg & communication, engineering department and others. One of my two best endaveours were to be the main technical lecturer in the presentation of the new security managed service, and to work in an operational risk assessment, with my last boss. I enjoyed to be in TELMEX. My main boss was Mr. Carlos Fernandez Podesta for many years. My second and last boss was Mr. Rafael Reinoso. During my last 4 to 5 years, I made a lot of technical presentations for sales & marketing purposes. In some way, my salesmen partners on TELMEX were my best mentors on the sales arena. I could observed many sales techniques and customers expectations.

Firstcom was the name of the company (in Peru) in September 1999, when I got in. - Protect the network and services of the datacenter in Peru. - Operate the incident handling and intrusion detection system, which was developed in house. - Represent AT&T Latin America in the FIRST community (Forum of Incident Response and Security Teams) - Manage the tecnological and security risk - Design, implement and operate countermeasures - Design and maintain the operational security procedures of datacenter and ISP network

Parte del grupo de estudio del convenio TECSUP-UARM.