Carmen M.Private profile: Upwork shows its earnings only to signed-in members, so we check it every few weeks, not daily. MRR here is a rough estimate (Upwork's six-month earnings ÷ months active). Last read Nov 5, 2026.

Professional Summary Experienced Virtual Chief Information Security Officer (vCISO) and cybersecurity expert with 25+ years in IT, including 20+ years dedicated to cybersecurity, network defense, and risk management. I help SMBs and fintechs build resilient security postures through strategic guidance, gap analysis, policy development, and hands-on technical execution — delivering enterprise-grade security without the overhead of a full-time CISO. Today my practice extends beyond traditional security into AI Security and LLM Red Teaming. I design defense-in-depth architectures for AI agents (Microsoft Copilot Studio + Azure AI), run adversarial testing against production LLMs (prompt injection, jailbreaks, PII exfiltration), and translate technical findings into executive risk reports aligned to the NIST AI RMF, OWASP Top 10 for LLM Applications, MITRE ATLAS, the EU AI Act, and GDPR. As a Prompt Engineer, I also build high-quality, context-aware, security-hardened prompts, with particular strength in Spanish-language AI content. I hold an MSc in Computer Engineering and have served international clients across multiple industries, making me a strong fit for LATAM, US, and global organizations that need both depth and clear communication. Core Competencies Strategic Security Leadership • vCISO services, security governance, risk assessments, audit remediation, and security roadmaps AI Security & LLM Red Teaming • Adversarial testing of LLM-based agents: prompt injection, jailbreak detection, PII protection, and multi-language attack-surface analysis • Defense-in-depth architectures for Copilot Studio agents: pre-LLM sanitization, semantic classification, persistent security logging, and human-in-the-loop (HITL) workflows • Executive risk reporting aligned to NIST AI RMF, GDPR, and emerging AI regulation Technical Cybersecurity • Network & cloud security architecture (AWS, Azure); vulnerability management; API & application security • Active Directory hardening; endpoint & SIEM (Sentinel, McAfee, QRadar); firewall & WAF configuration (Check Point, AWS WAF, Shield) Offensive Security • Penetration testing (web, mobile, internal, external); red teaming; threat modeling; OSINT • Kali Linux, Nessus, Qualys, Burp Suite, Metasploit Compliance & Documentation • ISO 27001 implementation, NIST CSF, PCI DSS, GDPR, HIPAA; policy & procedure writing; security awareness programs AI & Automation • Prompt engineering and LLM optimization (Spanish content); AI-powered threat detection; secure AI integration IT Operations & Support • Microsoft 365 security, Intune, Windows Server, Azure AD, Microsoft Purview & DLP; system hardening and patch management.Tools & Technologies Cloud & Security Platforms: AWS (WAF, Shield, Firewall Manager), Azure (Defender for Cloud, Sentinel, AI Content Safety, OpenAI), Microsoft 365 / Copilot Studio Networking & Defense: Check Point, Cisco IPS, Blue Coat, Citrix NetScaler Vulnerability & Testing: Nessus, Qualys, Kali Linux, Burp Suite, Metasploit Endpoint & Monitoring: Trend Micro, Cynet, McAfee SIEM, Microsoft Defender AI Security & Automation: Power Automate, Dataverse, GPT-4o, Python, Prompt Engineering, JSON Schema validation Compliance Frameworks: ISO 27001, NIST 800-53 / CSF, NIST AI RMF, PCI DSS, GDPR, HIPAA, EU AI Act, MITRE ATLAS, OWASP Top 10 for LLM Why Work With Me • Fractional CISO for SMBs: Enterprise-grade security strategy at a fraction of the cost of a full-time hire. • Full-cycle security services: From risk assessment through implementation and ongoing monitoring. • AI + Security synergy: I bridge traditional cybersecurity with modern LLM / AI workflows and AI-specific threat modeling. • Clear, actionable deliverables: Policies, reports, and architectures written plainly and aligned to your business goals. • Bilingual (Spanish & English): Ideal for LATAM, US, and global clients needing bilingual security support. Ideal Projects for Me • Securing and red-teaming AI agents and LLM-based applications (Copilot Studio, Azure AI) • ISO 27001 gap assessments and implementation planning • Interim or fractional CISO engagements for startups and fintechs • Penetration tests and red-team exercises • OSINT investigations and digital forensics • Custom AI prompts for secure, compliant Spanish-language content • Cloud security architecture design (AWS / Azure) • Security policies, incident-response plans, and risk-treatment plans