Skip to main content
Roger Figuereo
Roger Figuereo

Roger Figuereo

Cybersecurity & Infrastructure Leader | AI Governance & Security Strategy

Summary

Senior cybersecurity and infrastructure leader with 15+ years of experience building and running enterprise security programs across multi-cloud, hybrid, and Zero Trust environments. Currently the sole senior owner of security and infrastructure operations for a national footwear and apparel brand, with direct executive-level access. Built and led an enterprise AI governance program from the ground up, including AI risk assessment frameworks, workflow gap analysis, and AI-assisted detection tooling. Track record of translating technical risk into executive strategy, leading cross-functional initiatives, and delivering measurable gains in security posture, compliance readiness (SOC 2 Type II, NIST CSF), and operational efficiency. U.S. Army veteran with experience securing mission-critical systems for 5,000+ users in high-threat environments.

Technical Skills

AI & Automation
Microsoft Copilot for Security · AI-assisted threat detection · Automated security workflows (PowerShell + Graph API + CI/CD) · AI governance frameworks · AI risk assessment
Enterprise & Cloud Identity
Microsoft 365 · Entra ID · Intune · Microsoft Defender XDR · Microsoft Purview · AWS IAM
Network & Access Security
Zero Trust Architecture · Zscaler (ZIA/ZPA, SWG) · Cloudflare (WAF, DNS Security, ZT Access) · Cisco Meraki (firewall, SD-WAN, switching, wireless)
Security Operations
CrowdStrike Falcon (EDR, threat prevention, device control) · Rapid7 Insight Platform · Huntress MDR · SANS-aligned threat hunting & incident analysis
ITSM & Agile
ServiceNow (ITIL-aligned) · Freshservice · Jira
Infrastructure & Storage
NetApp enterprise storage (backup, replication, DR) · Synology NAS · Endpoint, server & hybrid infrastructure operations

Experience

Senior Systems & Security Administrator

NOBULL · Boston, MA ·

  • Spearheaded an enterprise-wide AI security governance program: acceptable use policies, AI risk assessment frameworks, and guardrails for AI tool adoption across all business units.
  • Conducted an AI workflow gap analysis across all departments to surface unmonitored AI usage, shadow AI risks, and data exposure vectors; delivered a remediation roadmap adopted by executive leadership.
  • Evaluated and piloted Microsoft Copilot for Security and additional AI tooling for threat triage, alert summarization, and incident response — reducing analyst workload and improving response velocity.
  • Led integration of AI-powered detection models into the SIEM/SOAR pipeline, reducing MTTD and improving alert fidelity through automated noise reduction and intelligent correlation.
  • Sole senior owner of all infrastructure and security operations — identity, cloud, network, endpoint, and application security — with direct executive leadership team visibility.
  • Administer and harden Azure, AWS, and Microsoft 365; implement Zero Trust controls, identity governance, and hardening standards organization-wide.
  • Architected and maintain Cloudflare WAF, DDoS protection, and application security controls for global workloads and customer-facing services.
  • Design and automate security, identity, and compliance workflows with PowerShell, Graph API, and CI/CD-integrated pipelines.
  • Manage vulnerability scanning, risk-based prioritization, and remediation; deliver executive reporting aligned to SOC 2 Type II and NIST CSF.
  • Implement and govern MFA, SSO, conditional access, and identity lifecycle automation.
  • Senior escalation point for all security incidents and cross-team investigations.
  • Author and maintain security standards, runbooks, and operational procedures.

Information Security Analyst III

Education Development Center · Waltham, MA ·

  • Monitored and safeguarded enterprise IT infrastructure across network, endpoint, and cloud, protecting sensitive research and grant data.
  • Executed risk assessments, vulnerability testing, and security audits against NIST CSF and CIS Controls.
  • Designed and enforced security policies, firewall rules, IDS configurations, and encryption protocols protecting regulated data and PII.
  • Led forensic investigations and end-to-end incident response, producing root-cause analysis and remediation plans for senior leadership.
  • Built and delivered security awareness training that measurably improved phishing resistance.
  • Enforced least-privilege access, MFA, and data classification aligned to NIST.
  • Partnered with IT and engineering to embed security requirements into the SDLC.

Senior Systems Analyst

Elkus Manfredi Architects · Boston, MA ·

  • Platform owner for hybrid Azure and Microsoft 365 environments serving ~300 users for a decade.
  • Engineered a zero-downtime migration from Exchange Server 2019 to Microsoft 365 — 300+ mailboxes, on schedule, no service disruption.
  • Authored functional specifications and security requirements documentation that improved service reliability.
  • Implemented identity and access governance, endpoint management, and system hardening.
  • Directed change management and training across technology initiatives; ~20% reduction in operational costs through improved SDLC and automation.
  • Managed vendor relationships and IT budget.

Lead Security Analyst & Signal Operations Leader

United States Army · Active Duty & Reserve ·

  • Owned and secured mission-critical communications systems supporting 5,000+ users across domestic bases and overseas deployments, with zero mission-impacting outages.
  • Led requirements analysis, system validation, and operational readiness for Signal (25-series) and Cyber Operations (17-series) platforms.
  • Delivered executive briefings to senior military leadership on system performance, mission risk, and security posture.
  • Designed technical training programs that reduced user-driven incidents by 35%.
  • Supported wartime deployments in 2011, 2012, and 2014.

Certifications

  • CISSP — Certified Information Systems Security Professional
  • CompTIA Security+
  • OWASP SAMM Fundamentals — Cybersecurity Professional Certificate

Awards & Honors

  • Army Commendation Medal
  • Army Achievement Medal (multiple)
  • National Defense Service Medal
  • Global War on Terrorism Service Medal

Languages

  • English (native/bilingual)
  • Spanish (native/bilingual)