matias@musso
CV
Matias Musso
Available · On‑site / Hybrid / Remote

I detect, respond and
harden infrastructure.

I'm Matias Musso, a Cybersecurity Engineer and Wazuh Consultant. For 4+ years I've worked on the Blue Team side across fintech, insurance and consulting: detecting threats, responding to incidents and getting companies audit‑ready.

Download CVLinkedIn

Experience at

  • KPMG
  • DHL Global Forwarding
  • HDI Seguros
  • Credencial Payments
  • Boreal IT Solutions

// impact

Measurable results, not just tools.

MTTD / MTTR
−40%

Up to 40% faster incident detection and response

Non‑compliances
−60%

Fewer critical findings between PCI‑DSS audits

Findings within SLA
85%+

Vulnerabilities closed within the agreed timeframe

Assets
100+

Servers and endpoints assessed and hardened

Featured certification
Wazuh Certified Security Professional (WCSP)2026 · also: Enterprise Security Manager 11.0 Essentials · Kali Linux Fundamentals
Stack
WazuhFortiSIEMEDRIncident ResponseForensicsQualys VMDRTrendMicroCVSS / VPRPentestingPCI‑DSS 4.0SOXNISTMITRE ATT&CKLinuxAzureDockerKubernetesAnsibleElastic / OpenSearchPythonBash

// experience

4+ years across fintech, insurance and consulting.

  1. Apr 2026 — nowFreelance

    Wazuh Consultant

    Boreal IT Solutions

    • Wazuh deployment and tuning for clients: manager, agents, rules, decoders, integrations and dashboards.
  2. Oct 2024 — Mar 2026Hybrid · Buenos Aires

    Cybersecurity Analyst

    Credencial Payments

    • Deployed and managed Wazuh (FIM, SCA and Vulnerability Detection) for PCI‑DSS 4.0 compliance, reducing MTTD/MTTR by ~30–40%.
    • Designed decoders, correlation rules and dashboards to continuously monitor PCI logging, file integrity and hardening controls.
    • Hardening and SCA/FIM assessments on 100+ assets, cutting critical non‑compliances by >60% between audit cycles.
    • Integrated Wazuh with SIEM, EDR and log sources (applications, databases and cloud), with parsing and normalization.
    • Vulnerability assessments and penetration testing prioritized by CVSS/VPR: >85% of findings closed within SLA.
    • Led incident response and forensic analysis, defining RCA and remediation plans that reduced recurrence by ~40%.
  3. Oct 2023 — Sep 2024Remote

    Cybersecurity Analyst

    KPMG Argentina

    • IT General Controls and SOX controls testing; security assessments against MITRE ATT&CK and vendor reviews.
    • Risk analysis of privileged users and recommendations to improve IT control design.
    • Gathered and delivered evidence for internal and external audits.
  4. Oct 2022 — Sep 2023Hybrid · Buenos Aires

    Cybersecurity Analyst

    HDI Seguros Argentina

    • Managed the TrendMicro console and ran network‑level vulnerability testing.
    • Monitored and responded to security incidents on Linux and Windows endpoints.
    • Reporting and follow‑up of security alerts to keep the infrastructure protected.
  5. Apr 2022 — Oct 2022Internship · Hybrid

    Information Security Project Manager

    DHL Global Forwarding

    • Analyzed vulnerability reports with Qualys VMDR 2.0 and tracked compliance with company security standards.
    • Defined and executed information security action plans.

// services

How I can help your organization.

01

Wazuh deployment

Manager, agents, FIM, SCA and Vulnerability Detection, production‑ready.

02

Custom rules and decoders

Detection and correlation tailored to your applications and log sources.

03

PCI‑DSS / SOX readiness

Controls, evidence and dashboards so the audit holds no surprises.

04

Hardening and vulnerability assessment

CVSS/VPR‑prioritized assessments and remediation validation.

// education

Education and certifications.

Education
  • Computer EngineeringUADE · 2021 — 2026
  • Associate Degree in CybersecurityEscuela Da Vinci · 2025 — 2027
  • Computer TechnicianE.T. N°68 Prof. Fdo. Arce · 2014 — 2020
Certifications
  • Wazuh Certified Security Professional (WCSP)pentester77 · 2026
  • Enterprise Security Manager 11.0 EssentialsMcAfee · 2023
  • Kali Linux FundamentalsCybrary · 2023

// contact

Let's talk

I'm open to new roles and consulting projects in Wazuh, threat detection and compliance.

contacto@matiasmusso.com.ar