jaalso@kali:~$ whoami

Jaime Soto.

Eight years operating enterprise infrastructure in regulated and multinational environments — a Swiss private bank, Microsoft, international schools — now moving into security engineering and offensive security. I build labs, investigate real-world threats, and document everything I learn.

Explore my work ↓
15
Hands-on labs
3
Research write-ups
5
Certifications
1
NCSC acknowledgment
About me
Eight years running infrastructure taught me how it breaks.
Keeping enterprise systems alive is the fastest way to learn exactly where — and how — they fail.

The path

My career began in IT operations and infrastructure — running Active Directory, endpoint security, and identity systems for a FINMA-regulated Swiss bank, Microsoft Switzerland, and international schools. I learned how enterprise environments are really built, secured, and where they quietly fail.

The transition

I'm now completing a federal Cybersecurity Specialist diploma at the Swiss Cyber Institute, with CEH in progress. I moved deliberately from keeping systems running to understanding how they're attacked and defended — the two halves of the same problem.

Hands-on practice

I build and document my own labs — SIEM deployment, DFIR reconstruction, memory forensics, web-app security — investigate real-world threats, and practice on Hack The Box, TryHackMe, PortSwigger, and CyberDefenders. I learn by doing and write up what I find.

Background
Experience & education
Professional infrastructure and security roles, and the training behind the transition.

Experience

Apr 2022 — Dec 2025
Schroder & Co Bank AG
IT Infrastructure Engineer / System Administrator
AD identity lifecycle, Microsoft Defender for Endpoint, Intune, certificate-based auth and PowerShell automation across 400+ users in a FINMA-regulated Swiss private bank.
Jun 2020 — Jan 2022
Microsoft Switzerland
IT Program Manager
Endpoint security and compliance for 3,000+ devices via Intune; privileged-account support for C-suite; rated 'sehr gut' across all areas.
Oct 2019 — Oct 2020
International School Basel
IT Support Engineer
Active Directory & Group Policy and endpoint hardening across Windows, macOS and ChromeOS — 2,000+ computers, 3 campuses.

Education & certifications

2025 — 2026 · in progress
Swiss Cyber Institute
Cybersecurity Specialist — Federal Diploma
Federal Cybersecurity Specialist track; CEH in progress alongside.
Dec 2025
Swiss Cyber Institute
Certified Security Professional (CSP)
Jul 2026
Google
Google Cybersecurity Professional Certificate
Feb 2023
Microsoft
Azure Fundamentals (AZ-900)
2013 — 2015
SENA · Colombia
Técnico en Mantenimiento de Equipos de Cómputo
Security research
Validated findings
Investigations documented and, where applicable, reported through responsible disclosure.
Storm-1865 Phishing Triage NCSC acknowledged · ref RNR-277766
Investigated a live phishing campaign targeting a Swiss resident, mapped the TTPs to MITRE ATT&CK, and reported it to NCSC Switzerland — who validated the attribution and acknowledged the IOC for downstream blocklisting.
View write-up ↗
BrowserGate — LinkedIn Browser Fingerprinting Threat verification · privacy
Independently verified a disclosed privacy vulnerability with Chrome DevTools, confirmed the data leaving the browser, then measured a working mitigation.
View write-up ↗
Windows Telemetry — DNS Sinkhole Analysis Privacy · DNS
Documented what a personal Windows host sends to Microsoft at the DNS layer, attributed each endpoint, and blocked it network-wide.
View write-up ↗
Technical training
Certifications
Federal diploma track, offensive and defensive training, and foundational certifications — verifiable where a public link exists.
Swiss Cyber Institute
Cybersecurity Specialist — Federal Diploma
In progress · expected Nov 2026
EC-Council
Certified Ethical Hacker (CEH)
In progress · 2026
Swiss Cyber Institute
Certified Security Professional (CSP)
Dec 2025 · ID 6943cb4581ae42c96101693d
Google
Google Cybersecurity Professional
Jul 2026 · Verify ↗
Microsoft
Azure Fundamentals (AZ-900)
Feb 2023 · Verify ↗
Google
Google IT Support Professional
Jan 2022 · Verify ↗
Personal documentation
Learn. Test. Document.
A hands-on record of labs, investigations, and practice across offensive and defensive security.
Contact

Let's talk.

I'm always open to connecting and talking about security engineering, offensive and defensive work, and the move from infrastructure into cyber.