Threat Intelligence & Hunting
OSINT, dark-web monitoring, adversary TTP tracking, and proactive hunts that convert telemetry noise into defensible action.
- IBM X-Force
- Google Chronicle
- TTP Tracking
- Proactive Hunting
CYBERSECURITY ARCHITECT ยท RESEARCHER ยท THREAT INTEL LEADER
Iโm Jose Guzman, a cybersecurity and threat intelligence leader with 23+ years of enterprise experience turning an attackerโs mindset into practical engineering, sharper visibility, and resilient architectures.
01 / EXPERTISE
From the first weak signal to executive decision-making, connecting deep technical offense with durable operational defense.
OSINT, dark-web monitoring, adversary TTP tracking, and proactive hunts that convert telemetry noise into defensible action.
Ethical hacking, web application testing, stored/DOM XSS research, and validation of emerging web and adversarial AI attack paths.
Resilient enterprise architectures aligned to NIST CSF and ISO 27001, with pragmatic protection across AWS and Azure cloud estates.
Hardening the modern pipeline: adversarial ML robustness, prompt injection mitigations, RAG security, and CI/CD security gates.
02 / TRACK RECORD
Proven execution across global technology enterprises, advisory councils, and continuous security operations.
Spearheaded integration of artificial intelligence into threat hunting and detection telemetry.
Architecting offensive and defensive training curricula and high-assurance risk models.
Continuous top-tier performance identifying critical vulnerabilities across Fortune 500 scopes.
03 / SELECTED WORK
A curated window into an extensive public catalog spanning purple-team tooling, hardware security, and automation.
Interactive security showcase featuring comprehensive intelligence feeds, research summaries, and operational methodology.
Focused collection of offensive security research, custom exploit payloads, and automated purple-team tools.
Feature-rich, resilient, and customizable firmware research for the portable multi-tool and hardware analysis ecosystem.
Exploration, protocol dissectors, and firmware utilities for handheld radio and access control assessments.
04 / OPERATING MODEL
Discover signal across dark web, telemetry, OSINT feeds, and emerging adversary behaviors.
Replicate the attack path, quantify genuine blast radius, and separate facts from assumptions.
Convert insights into hardened architectures, automated detections, and Zero Trust guardrails.
Translate technical telemetry into actionable, high-clarity risk decisions for C-suite leaders.
05 / CONNECT
Open to strategic cybersecurity advisory, architecture design, threat intelligence operations, offensive assessments, and collaborative research with teams prioritizing evidence over security theater.