Statusopen to new rolesSee what I am looking for Christian Carrasco
Security & IT Operations Strategist
Keeping systems resilient. Keeping threats out.
Ten plus years keeping enterprise systems running and secure: leading major incident management for Toyota Motor North America, SIEM work in a security operations center, and identity and access on Microsoft, with a growing focus on compliance.
Skills & Tools
- Azure / Entra ID
- Microsoft 365
- Active Directory
- Exchange
- AWS
- Dynatrace
- PagerDuty
- ServiceNow
- LogRhythm
- Wireshark
- Cisco
- Linux
Highlights
5 yrs
Incident management
Five years managing high-impact production incidents at Toyota Motor North America, the last three leading a five-person team.
3
Audits supported
Supported from the IT and security side across HIPAA, ISO 27001 and PCI DSS, including control testing against NIST CSF.
3
Industries
Healthcare, media, and automotive: regulated systems, a security operations center, and enterprise production support.
2
Languages
Fluent in English and Spanish, able to work directly with Spanish-speaking teams, users and stakeholders.
Core Strengths
ITSM & Operations Leadership
Major Incident, Problem & Change, SLAs & Service Delivery, Team Leadership, Runbooks & Monitoring
Microsoft Identity & Security
Entra ID & Conditional Access, Active Directory & Exchange, Defender XDR · Sentinel · Purview (lab build)
Security Operations
SIEM & Alert Triage, Phishing Investigation, Vulnerability Management, Identity & Access
Compliance Support
Audit Evidence & Access Reviews, Control Testing Support, Remediation Tracking, Studying SSCP & CISSP
Career at a Glance
- 2023 to 2026
Operations Manager, promoted in 2023
Beyondsoft Consulting, on assignment at Toyota Motor North America
Incident management lead, SLA performance tracking, vendor contracts and budget utilization tracking, and a five-person team.
2021 to 2023Senior/Lead Technical Systems Analyst
Beyondsoft Consulting, on assignment at Toyota Motor North America
Entra ID Conditional Access and MFA, AWS security audits, DNS and SSL certificates, and Dynatrace monitoring with PagerDuty alerting for client production applications.
- 2019 to 2020
Information Security Analyst
TelevisaUnivision
SOC triage, lead LogRhythm SIEM administrator, and detection alert enhancements mapped to MITRE ATT&CK.
- 2014 to 2019
Technical Support Analyst
Cigna HealthCare
Grew from level 1 support to the team’s level 3 escalation point, running Active Directory, Azure AD and Exchange, with HIPAA audit evidence along the way.
- 2013 to 2014
IT Support Specialist
Commonwealth-Altadis
Deployed more than 300 machines for a sales force of over 1,500 agents.
Certifications & Education
- LPI Linux EssentialsLifetime (active)
- Microsoft Certified: Azure AI Fundamentals2024 (active)
- CompTIA Project+Lifetime (active)
- CompTIA Cloud Essentials+Lifetime (active)
- ISC2 SSCPTarget Nov 2026 (in progress)
- ISC2 CISSPTarget Dec 2026 (in progress)
- Cisco CCNA Routing & Switching2020 to 2023 (previously held)
- CompTIA Security+2019 to 2022 (previously held)
- EC-Council Certified Ethical Hacker (CEH)2019 to 2022 (previously held)
- AWS Certified Cloud Practitioner2019 to 2022 (previously held)
- CompTIA A+2018 to 2022 (previously held)
- ITIL 4 Foundation2019 to 2023 (previously held)
- B.S. Network Operations and Security · Western Governors University
What’s Cooking
- ISC2 SSCP Exam in November 2026, with the CISSP right afterIn progress
- ISC2 CISSP Targeting December 2026. The five year experience requirement is already met, so what is left is the examIn progress
- Microsoft security lab Building Defender XDR, Microsoft Sentinel and Purview on a Microsoft 365 E5 tenant, on an Entra ID foundation, each project ending in a writeupOngoing
Open to What’s Next
I’m open to roles in security operations, cybersecurity compliance and GRC, Microsoft security and identity, incident management, and IT operations. Beyond that, I’m always glad to meet new people, swap ideas, or talk shop.
LinkedIn is the easiest place to find me, so come say hi!