Abel Alamillo

Malware Scanning Pipeline with AWS + VirusTotal

• Built a real-time malware detection pipeline using AWS Lambda, S3, and VirusTotal API
• Tagged uploaded files with verdicts such (clean, suspicious,malicious) and logged the structured results to Cloudwatch
• Configured CloudWatch metric filters and alarms to detect files with the malicious verdict and trigger alerts
• Automated deployment with Terraform and Github Actions, including secure API key handling and CI/CD packaging

🔗 Front-End GitHub Repo • 🔗 Back-End GitHub Repo 📘 Blog Post

AWS Serverless CI/CD Website

• Built a fully serverless resume site with S3, CloudFront, API Gateway, Lambda, and DynamoDB.
• Used Python + Boto3 to manage visitor count tracking via a REST API.
• Managed infrastructure with Terraform and CI/CD via GitHub Actions for IaC deployment.
• Integrated GuardDuty and IAM best practices to ensure security visibility and least privilege.

🔗 Front-End GitHub Repo • 🔗 Back-End GitHub Repo 📘 Blog Post

Home Networking Project

• Containerized tools using Docker and deployed secure DNS/VPN access with Pi-hole and PiVPN.
• Implemented hardened network services and reduced attack surface using industry best practices.
• Configured secure remote access for home resources while blocking malicious traffic.
• Orchestrated service deployments using Kubernetes to streamline future scale and management.

📘 Blog Post

Proxmox HomeLab

• Simulated identity-focused attack scenarios using AD, identity sync, and security tooling across isolated VMs.
• Configured VLANs, firewall rules, and Proxmox virtual networks to simulate real enterprise segmentation.
• Analyzed malware and identity-based attacks using a dedicated detection/response stack.
• Documented the full homelab setup and wrote a published blog series detailing techniques and findings.

📘 Blog Post

Computer Systems Specialist II

• Administered Active Directory and Entra ID (Azure AD) environments, managing user provisioning, SSO/SAML integration, and identity lifecycle processes.
• Automated repetitive IT tasks using PowerShell and Bash — including access control, patch deployment, and system provisioning — reducing manual workload by over 40%.
• Designed and enforced secure authentication policies such as MFA and conditional access login across both Windows and macOS environments.
• Managed enterprise-wide file sharing and print server infrastructure, ensuring high availability and access control compliance.
• Created scripts and policies for software licensing compliance, and implemented automated checks for software expiry and usage.
• Collaborated with academic and administrative departments to build secure, reliable IT environments tailored to diverse user needs.

Computer Specialist I

• Provided hands-on technical support across macOS, Linux, and Windows platforms, resolving complex user issues involving software conflicts, system performance, and hardware failures.
• Managed Active Directory user and group accounts, GPO enforcement, and authentication via Kerberos, NTLM, and LDAP.
• Deployed hundreds of endpoints using imaging tools (MDT, SCCM, Jamf Pro), reducing setup time for new machines by 70%.
• Created internal documentation for common system configurations and incident workflows, reducing resolution time for junior techs.
• Played a key role in maintaining security posture during hardware refreshes by enforcing encryption, AV, and baseline patch levels.
• Assisted in VPN and firewall configuration for remote faculty and staff access during hybrid learning periods.

Student Information Security Analyst

• Proactively monitored and analyzed network threats using Microsoft ATP and FireEye Managed Defense, playing a key role in the rapid identification and mitigation of potential security vulnerabilities.
• Delivered monthly presentations on cybersecurity trends and updates to the IT team, non-technical staff, and students effectively bridging the gap in understanding complex IT security concepts.
• Collaborated in the development and implementation of a comprehensive incident response plan, significantly enhancing the university’s preparedness and response time for potential cyber threats
• Developed insightful data visualizations of security incidents using Microsoft Cloud App Security, enabling swift identification and triage of malicious activity.
• Assisted in vulnerability assessments by cross-referencing scanner outputs with current configurations and patch states.

University of California Merced

GPA: 3.80