Defensive Security · Detection & Response

Jorge Ortiz

Blue team by trade, red team by curiosity.

CS student at FAU with enterprise IT experience, from Tier 1 tickets to threat hunting in SentinelOne and alert triage in a SOC. Currently building SentinelZero, a lateral movement detection platform.

Looking for defensive security work: SOC, detection engineering, or incident response.

SentinelZero / LateralWatch title card showing a network graph and MITRE ATT&CK technique tags
SentinelZero, my lateral movement detection platform

Right nowStudying for CompTIA Network+, building out SentinelZero’s alert pipeline, and working through offensive labs on BreachLab to sharpen my detections.

3+ yrsin enterprise IT
2,000+employees supported
75-80%phishing pass rate, up from 40%
15-20tickets a day, under 20 min each
The short version

Why detection

While I was at RCC Associates I watched a lateral movement incident unfold on our network. It got handled, but what stuck with me was how much of the evidence had been sitting in logs the whole time, waiting for someone to know what to look for.

That is why I moved off the help desk and into security, and it is the reason I am building SentinelZero. It is also why I spend my own time in offensive labs. You cannot write a detection for a technique you have never run yourself.

About

A bit of background

I support enterprise IT environments and study computer science at Florida Atlantic University. I have gone from Tier 1 tickets to supervising technicians, running hybrid Active Directory and Azure AD implementations, and threat hunting in SentinelOne.

The part I keep coming back to is detection work: figuring out what normal looks like on a network so you can tell when it stops being normal. I am building toward defensive security roles focused on detection, incident response, and EDR operations.

I also practice on the offensive side. Understanding how an attacker actually moves is what makes a detection rule worth writing, so I work through labs on my own time and feed what I learn back into SentinelZero.

Skills

What I work with

Security & Cloud

  • SentinelOne
  • Microsoft Sentinel
  • AgileBlue
  • NodeWare
  • MITRE ATT&CK
  • Azure AD / Entra ID
  • Active Directory
  • TCP/IP Networking
  • Nmap
  • Windows Hardening
  • Log Monitoring
  • Linux
  • AWS

Languages & Tools

  • Python
  • Java
  • C++
  • JavaScript
  • TypeScript
  • PowerShell
  • Docker
  • React
  • Node.js
  • FastAPI
  • Git / GitHub
  • Figma

Forensics & Analysis

  • Autoruns
  • Process Explorer
  • Wireshark
  • Snort

Certifications

  • CompTIA Network+ (N10-009)In progress, expected 2026
  • CompTIA Security+Planned, 2026
Experience

Where I've worked

Mar 2026 – Apr 2026

Cybersecurity Intern

SkyTek Solutions · Coral Springs, FL

  • Triaged security alerts across 300+ endpoints using AgileBlue SIEM, applying MITRE ATT&CK techniques to support threat detection.
  • Developed and ran remediation scripts across 300+ endpoints via NodeWare to patch tracked CVEs, reducing organizational exposure to known vulnerabilities.
Jul 2025 – Dec 2025

IT Systems Admin

RCC Associates · Deerfield, FL

  • Resolved 15-20 tickets daily across hardware, networking, VoIP, and enterprise systems for 100+ employees.
  • Led hybrid Active Directory and Azure AD implementation, improving centralized identity management and security posture.
  • Conducted threat hunting and incident analysis via SentinelOne ThreatOps, applying EDR queries and MITRE ATT&CK techniques.
Aug 2024 – Jul 2025

Help Desk Technician, Tier 2

Banyan Treatment Centers · Pompano Beach, FL

  • Resolved 15-20 support tickets daily, averaging under 20 minutes per ticket.
  • Supervised 3 outsourced IT support technicians, coordinating daily tasks and service delivery across multiple centers.
  • Administered the company-wide Infosec IQ security awareness program for 2,000+ employees, including monthly training, quizzes, and phishing simulations.
  • Drove phishing simulation pass rates from 40% to 75-80% through targeted training campaigns and compliance dashboards reported to executive leadership.
Oct 2022 – Aug 2023

Help Desk Technician, Tier 1

Banyan Treatment Centers · Pompano Beach, FL

  • Provided Tier 1 technical support and resolved service tickets across hardware, software, and account access, ensuring HIPAA-compliant handling of records.
Education

School

Florida Atlantic University

Boca Raton, FL · May 2027

B.S. Computer Science

Minor in Cybersecurity and A.I. GPA 3.6.

Broward College

Coconut Creek, FL · Aug 2024

A.A. Computer Science

GPA 3.2. Completed before transferring to FAU.

Leadership & Competition

FAU Cybersecurity Club

Infrastructure Officer · Fall 2026

  • Setting up and configuring lab server infrastructure (Proxmox) for club use.
  • Networking lab machines to servers and building out practice environments for members and competition prep.

SFISSA Hack the Flag 2026

1st place · Sept 2026

  • Capture-the-flag event covering OSINT, web exploitation, and secure coding. Our team captured 82 of 83 flags.