Keebin Bogantes

Cybersecurity and Network Security Engineer

Actively looking · Member since 3 Sep 2026

Message

Location: La Aurora, Costa Rica

Desired salary: Unspecified

Work preference: Remote Only

Experience level: Lead

About

Professional summary

I am a cybersecurity professional with 16 years of experience in SIEM operations, threat detection, network security, and incident response. I specialize in protecting enterprise environments through security monitoring, firewall administration, and proactive threat mitigation.

I have extensive hands-on experience with Devo, ArcSight ESM, QRadar, and security logging platforms. I use these technologies to investigate alerts, validate detection rules, identify risks, and improve the effectiveness of SOC operations.

I currently lead a threat detection team, collaborating with SOC, fraud, incident response, backend, and stakeholder teams. I apply red teaming techniques and MITRE ATT&CK alignment to validate security controls and strengthen detection capabilities.

My network security background includes Cisco ASA, Palo Alto, Check Point firewalls, VPN technologies, routing, switching, access controls, and troubleshooting complex network failures. I have managed critical incidents for large enterprise environments and restored services under high-pressure conditions.

I am a collaborative and self-motivated professional with strong troubleshooting, leadership, documentation, and training capabilities. I enjoy developing playbooks, conducting simulations, and helping teams maintain effective security operations and incident-response readiness.

Skills

15 capabilities

Tech stack & tools

Working toolkit

Experience

Career history

Threat Detection Team Lead Microfocus

Mar 2017 – Present

I lead a team responsible for verifying and validating new security rules across Devo, ArcSight, and Logger SIEM platforms. I work closely with backend teams and key stakeholders, including SOC, fraud, and incident response teams, to ensure detection rules are effective and aligned with operational needs.

I use red teaming techniques and the MITRE ATT&CK framework to strengthen threat detection coverage. I also manage critical security incidents, conduct readiness training and simulations, and create playbooks and technical documentation to improve processes and maintain security best practices.

SOC SIEM Analyst IBM

Mar 2013 – Feb 2017

I worked in a Security Operations Center monitoring and detecting security threats to protect organizational systems and data. I used QRadar and ArcSight to analyze real-time alerts, investigate risks, and implement proactive threat mitigation strategies.

I also provided maintenance support for Cisco and Palo Alto firewall environments. My responsibilities included upgrading firewall clusters to remediate vulnerabilities, managing access controls, troubleshooting network failures, and maintaining the security and stability of client networks.

Firewall Support Specialist Cisco TAC

Jan 2008 – Feb 2013

I began my cybersecurity career on Cisco's VPN team, supporting firewalls and routers in a high-pressure enterprise support environment. I handled critical incidents affecting large organizations and frequently restored operations in under an hour.

My work with VPN technologies and security protocols developed my expertise in secure communications, network protection, and complex infrastructure troubleshooting. This role strengthened my ability to remain calm, effective, and responsive during urgent operational incidents.