Hector J. Borges

• Founded and launched a full-stack cybersecurity intelligence platform delivering daily threat briefings, practitioner-written Threat Intel articles, DIG analysis pieces, and enterprise security culture content to workforce and practitioner audiences.
• Published 165 consecutive editions of the Daily Digital Awareness Briefing, growing readership to 100+ active subscribers and generating 4,000+ LinkedIn impressions across syndicated content within the platform's first quarter of operation.
• Designed and operate a production PostgreSQL database (25 tables) with event-driven pipelines, cron-triggered services, JWT-authenticated agent workflows, and scoped API permissions at the application layer.
• Built the full platform stack independently: HTML/CSS/JS front end, Node.js/Express back end, Railway deployment, and SendGrid transactional email.
• Architected CyberSense Ops — a modular AI-powered editorial pipeline with dual parallel workflows (Intel Brief and Daily Brief) staffed by a 33-role autonomous agent structure coordinated across multiple LLM APIs, with gpt-image-2 banner generation and XML-based output extraction for production reliability.
• Leading phased product development across freemium, subscription, and enterprise training tiers, applying Zero Trust and least-privilege principles to application security design.

• Administered Active Directory accounts and Group Policy Objects for 30+ users, supporting identity lifecycle management and access control continuity.
• Resolved Tier 1 and Tier 2 hardware and software issues, reducing user downtime and maintaining departmental operational continuity.
• Applied security-conscious troubleshooting practices across Windows environments, reinforcing institutional data integrity and system availability.

• Led personnel and operational planning across high-consequence environments, including multinational deployments requiring real-time coordination and zero-margin execution.
• Developed and published SOPs supporting mission readiness, deployment planning, and operational continuity across diverse unit structures.
• Managed personnel readiness tracking, incident investigations, and structured retraining programs — building durable skills in documentation, accountability, and organizational leadership.
• Supervised teams of varying sizes in dynamic, resource-constrained environments where clarity of mission and discipline of execution were non-negotiable.

CyberSense.Solutions — Intelligence & Awareness Platform

Founded and operate a veteran-owned cybersecurity intelligence and awareness platform producing daily threat intelligence briefings, Threat Intel articles, and DIG (Development · Innovation · Governance) analysis pieces. Powered by CyberSense Ops — a modular AI-driven editorial pipeline (Node.js/Express on Railway) with dual parallel production workflows and a 33-role autonomous agent structure. Articles follow a nine-section canonical intelligence structure covering ransomware, CVE analysis, agentic AI security, post-quantum cryptography, and governance frameworks.

Research Preprint — Cybersecurity Workforce Training

Closing the Human Element Gap in Cybersecurity: A Continuous-Microlearning Intelligence Pipeline and the Jumpmaster Training Model

Synthesizes peer-reviewed literature on human factors, microlearning, and continuous reinforcement to argue that the cybersecurity stack is overinvested in reactive technology relative to workforce risk reduction. Presents the CyberSense.Solutions operating model and the Jumpmaster Training Model — a daily, deliberate, role-realistic awareness framework adapted from elite military airborne operations — supported by proof-of-concept data from 103 consecutive briefing editions (35.7% impression growth, 51.9% reach growth over 135 days). Proposes a four-component controlled evaluation protocol using the HAIS-Q instrument.

DOI: 10.13140/RG.2.2.17784.20485  ·  April 22, 2026

Research Publication — IoT Security

Mitigating Digital Risk Across the Expanding IoT Ecosystem

Comprehensive analysis of IoT security risks — authentication weaknesses, insecure transmission, firmware exploitation, and privacy challenges. Proposed layered mitigation strategies aligned with NIST IR 8259r1 and NIST IR 8425, emphasizing encryption, secure boot, automated patching, network segmentation, and anomaly detection.

DOI: 10.13140/RG.2.2.35149.09447  ·  November 5, 2025

Enterprise Security Architecture – Healthcare Network

Designed a HIPAA- and NIST-aligned Zero Trust architecture for a healthcare system spanning six hospitals (HealthSecure Hospitals Inc.). Integrated SIEM capabilities, network segmentation, PKI, IAM lifecycle controls, and structured incident response processes. Aligned with NIST CSF 2.0, NIST SP 800-53 r5, and NIST SP 800-66.

Access Control in Modern Cybersecurity

Analysis of the evolution of access control from foundational firewalls and ACLs through Zero Trust Architecture, SASE, micro-segmentation, RBAC/ABAC, MFA, and AI-driven behavioral analytics. Case study framed around a multi-state hospital network.

EXIF Metadata as a Hidden Threat Vector

Deconstruction of how threat actors weaponize EXIF metadata in everyday image files to execute unauthorized commands — including CVE-2021-22204 (ExifTool RCE). Covers Python-based automated detection tooling, upload sanitization protocols, and EC2 instance metadata exposure hardening.