Christian Carrasco
Security & IT Operations Strategist
Ten plus years keeping enterprise systems running and defensible on Microsoft identity, from a HIPAA-regulated healthcare environment and a SOC to leading incident management as a consultant for the world’s largest car manufacturer.
Skills & Tools
- Azure / Entra ID
- Microsoft 365
- Active Directory
- Exchange
- AWS
- Dynatrace
- PagerDuty
- ServiceNow
- LogRhythm
- Wireshark
- Cisco
- Linux
Highlights
5 yrs
Incident management
Five years managing high-impact production incidents at Toyota Motor North America, the last three leading a five-person team.
5
Audit domains
CMS, HIPAA, ISO 27001, PCI DSS, SOX, with controls tested against NIST 800-53 and CSF.
3
Industries
Healthcare, media, and automotive: regulated systems, a security operations center, and enterprise production support.
2
Languages
Fluent in English and Spanish, able to work directly with Spanish-speaking teams, users and stakeholders.
Core Strengths
IT Service Management (ITSM)
Incident, Problem, Change, Service Delivery & SLAs
IT Leadership & Operations
Team Leadership, Runbooks & Process, Cloud & Monitoring
Microsoft Identity & Security
Entra ID & Conditional Access, Active Directory & Exchange, Defender XDR, Sentinel & Purview in the lab
Cybersecurity
Security Operations, Identity & Access, Vulnerability Management, Compliance & Control Testing
Career at a Glance
- 2023 to 2026
Operations Manager, promoted in 2023
Beyondsoft Consulting, on assignment at Toyota Motor North America
Incident management lead, SLA performance tracking, vendor contracts and budget utilization tracking, and a five-person team.
2021 to 2023Senior/Lead Technical Systems Analyst
Beyondsoft Consulting, on assignment at Toyota Motor North America
Entra ID Conditional Access and MFA, AWS security audits, DNS and SSL certificates, and Dynatrace monitoring with PagerDuty alerting for client production applications.
- 2019 to 2020
Information Security Analyst
TelevisaUnivision
SOC triage, lead LogRhythm SIEM administrator, and detection alert enhancements mapped to MITRE ATT&CK.
- 2014 to 2019
Technical Support Analyst
Cigna HealthCare
Grew from level 1 support to the team’s level 3 escalation point, running Active Directory, Azure AD and Exchange, with CMS and HIPAA audit evidence along the way.
- 2013 to 2014
IT Support Specialist
Commonwealth-Altadis
Deployed more than 300 machines for a sales force of over 1,500 agents.
Certifications & Education
- LPI Linux EssentialsLifetime (active)
- Microsoft Certified: Azure AI Fundamentals2024 (active)
- ISC2 SSCPTarget Oct 2026 (in progress)
- ISC2 CISSPTarget Nov 2026 (in progress)
- Cisco CCNA Routing & Switching2020 to 2023 (previously held)
- CompTIA Security+2019 to 2022 (previously held)
- EC-Council Certified Ethical Hacker (CEH)2019 to 2022 (previously held)
- AWS Certified Cloud Practitioner2019 to 2022 (previously held)
- CompTIA A+2018 to 2022 (previously held)
- ITIL 4 Foundation2019 (previously held)
- CompTIA Project+2019 (previously held)
- CompTIA Cloud Essentials+2019 (previously held)
- B.S. Network Operations and Security · Western Governors University
What’s Cooking
- ISC2 CISSP Targeting November 2026. The five year experience requirement is already met, so what is left is the examIn progress
- Microsoft security lab Defender XDR, Microsoft Sentinel and Purview on a Microsoft 365 E5 tenant, built on Entra ID, each project ending in a writeupOngoing
Open to What’s Next
I’m open to roles in security operations, Microsoft security and identity, incident management, and IT operations. Beyond that, I’m always glad to meet new people, swap ideas, or talk shop about keeping systems running and secure. LinkedIn is the easiest place to find me, so come say hi!