vCISO Services logovCISO Services Externship via Extern
Paloma Galindo portrait

Senior student focused on IoT security and hands-on cyber defense

I study at Western Governors University and practice IoT cyber defense through project-based externships that cover attacks and defenses.

Work samples

Portfolio highlights include an externship that involved offensive testing of IoT systems and implementing defenses, with documented playbook deliverables.

  • Hydroficient IoT Cyber Defense Externship
    Hydroficient IoT Cyber Defense Externship
    Hydroficient logo

    Hydroficient · Jun 2026 · ✅ Verified by Extern

    Hydroficient IoT Cyber Defense Externship

    Build, hack, and defend real IoT infrastructure, then hand your security playbook to an actual company. You’ll launch realistic cyberattacks, from spoofing and replay attacks to unauthorized shutoffs, and implement defenses like TLS and mTLS.

    Top performerPython ProgrammingData AnalysisThreat ModelingDashboard Development
  • vCISO Security Risk Assessment Externship
    vCISO Security Risk Assessment Externship
    vCISO Services logo

    vCISO Services · ✅ Verified by Extern · ⏱️ In progress

    vCISO Security Risk Assessment Externship

    Be a junior security consultant. Find a company's weak spots, score them on NIST and create a deck for senior leaders.

    Website Security TestingSecurity Policy ReviewIncident Report AnalysisNIST CSF 2.0 Gap Analysis

About me

I study at Western Governors University and practice IoT cyber defense through project-based externships that cover attacks and defenses.

I am a senior working toward a bachelors degree at Western Governors University. I have some practical experience and have completed an IoT cyber defense externship where I built, attacked, and defended realistic IoT infrastructure and produced a security playbook for the host company.

Externships

vCISO Security Risk Assessment Externship

In progress

Experience

IT Support Engineer Technician

Premier Technologies · 5/2026 – 6/2026

Cyber Defense Extern

Hydroficient · 5/2026 – 6/2026

Security Engineer Intern

Activision (Blizzard Entertainment) · 5/2023 – 8/2023

Cyber Security Intern

Activision (Blizzard Entertainment) · 5/2022 – 8/2022

Cyber Security Intern

Activision (Blizzard Entertainment) · 5/2021 – 8/2021

Education

Western Governors University

B.S. IT Management · Class of 2026

Skills

IoT security testingSpoofing and replay attack techniquesDefensive controls: TLS and mTLSSecurity playbook documentationHands-on cyber defense exercises

✅ Verified by Extern

Hydroficient IoT Cyber Defense Externship

Build, hack, and defend real IoT infrastructure, then hand your security playbook to an actual company. You’ll launch realistic cyberattacks, from spoofing and replay attacks to unauthorized shutoffs, and implement defenses like TLS and mTLS.

Python ProgrammingData AnalysisThreat ModelingDashboard Development

Overview

The work mapped a hotel-scale IoT water system, built and hardened an MQTT pipeline, and added monitoring and anomaly-detection layers. Deliverables included a prioritized STRIDE threat model, Colab notebooks and sensor logs, TLS/mTLS implementations, replay-defence experiments, a security dashboard, and an Isolation Forest integration. The work was awarded Top Performer by Hydroficient.

Hydroficient IoT Cyber Defense Externship

What I've accomplished

I produced a prioritized threat model, working Colab notebooks and sensor logs, a secured TLS+mTLS MQTT pipeline, a Device Provisioning Policy, replay-attack test results showing combined defenses blocked all scenarios, a real-time security dashboard, and an Isolation Forest anomaly layer.

Top performer

Project breakdown

View all work

✅ Verified by Extern · ⏱️ In progress

vCISO Security Risk Assessment Externship

Be a junior security consultant. Find a company's weak spots, score them on NIST and create a deck for senior leaders.

Website Security TestingSecurity Policy ReviewIncident Report AnalysisNIST CSF 2.0 Gap Analysis

Overview

The externship produced a security risk assessment aligned to NIST control families. The work mapped identified vulnerabilities to relevant controls, scored risks, and compiled a control-mapped risk register plus an executive slide deck for leadership review.

vCISO Security Risk Assessment Externship

What I've accomplished

I ran a focused risk assessment cycle: scoping the engagement with stakeholders, inventorying assets and existing controls, scoring risks against NIST control families, and packaging findings into a risk register and an executive slide deck.

Project breakdown

View all work