Zero Trust & Risk Advisor · Annapolis, Maryland

Zero Trust & Risk Awareness.

Erick Ramos is a U.S. Marine Corps veteran and cybersecurity advisor, helping regulated enterprises in healthcare, finance, and SLED assume breach, verify every request, and understand which risks actually matter — so zero trust becomes a practical, prioritized roadmap instead of a buzzword.

7+

Years in Cyber

42

Courses & Certs

USMC

COMSEC Veteran

Erick Ramos formal portrait
NEW THIS WEEK

Weekly Threat Brief ↓

FOCUS AREA

Zero Trust & Risk

About

Never trust. Always verify.

Erick Ramos

Erick Ramos has spent the last 7 years in cybersecurity, backed by over 16 years of progressive sales experience. As a cybersecurity advisor focused on zero trust and risk awareness, he helps regulated organizations — across healthcare, finance, and SLED — stop implicitly trusting users, devices, and networks, and make clear-eyed decisions about the risks that matter most.

The perimeter no longer holds, and attackers increasingly log in rather than break in. A zero trust approach — verify explicitly, grant least privilege, assume breach — only works alongside risk awareness: knowing what is exposed, what is actually being exploited, and where people are the weakest link. That visibility is the starting point for continuous, unified exposure management.

A proud veteran of the U.S. Marine Corps, Erick served during Operation Enduring Freedom in the aftermath of 9/11 as a Radio Operator specializing in communications security (COMSEC) and cryptographic codes — a foundation of discipline around verifying before trusting that still defines how he approaches security today.

Erick is an active member of the Cybersecurity Association (formerly the Cybersecurity Association of Maryland) and serves as a trusted Security and Risk Advisor to regional small and medium-sized businesses. He also publishes a weekly threat intelligence brief tracking CISA KEV additions and the defensive priorities that follow.

Alongside security, Erick builds with AI — using Claude Code, ChatGPT Codex, and other tools to develop applications and automate his own workflows. See AI & Automation.

Having led and mentored high-performing teams of Account Executives, Account Managers, and Sales Engineers, Erick translates complex risk and zero trust concepts for both technical and business stakeholders — turning findings into decisions leadership can act on.

Verticals Served

  • Healthcare
  • Finance
  • SLED
  • MSPs & MSSPs
  • Velocity – Mid Market

Core Expertise

Specializations.

Anchored by one principle — never trust, always verify — with risk visibility, exposure management, detection, and data protection built around it.

Risk & Exposure

  • Risk Assessment
  • Vulnerability Management
  • Attack Surface Management
  • Web Application Scanning
  • Cloud Security & Governance
  • AI Exposure & Shadow AI

Access & Identity

  • Privileged Access Management
  • Identity & Access Management
  • Privileged Password Security
  • Dark Web Credential Monitoring

Detection & Response

  • Endpoint Detection & Response
  • Managed Detection & Response
  • Security Info. & Event Management
  • Incident Response

Data & Email Protection

  • Email Security & Encryption
  • Email Archiving & Continuity
  • SaaS & VM Backup
  • Anti-Virus & Anti-Malware

Network & Infrastructure

  • Firewalls & Access Points
  • Network Operations
  • Physical Security

People & Compliance

  • Security Awareness Training
  • PCI Compliance
  • Insider Threat Awareness

AI & Automation

Builds with AI. Automates the rest.

Erick treats AI as a working tool, not a talking point — using it to build software, speed up his own work, and automate the repeatable parts — and brings a security advisor’s eye to how it’s used.

Application Development with AI

Builds and ships applications with AI coding agents — including Claude Code and ChatGPT Codex, alongside other AI development tools — from first idea to working software. Current project: Void Frontier, a real-time strategy (RTS) game in development, built with Claude.

  • Claude Code
  • ChatGPT Codex
  • AI-Assisted Development
  • Void Frontier · RTS Game

AI in Daily Work

Uses AI every day for research, writing, analysis, and planning — and has completed training in Everyday Productivity with Claude Cowork and Strategic Prompt Engineering.

  • Prompt Engineering
  • Claude Cowork
  • Skill Building
  • Hermes Agent
  • JEV
  • AI Agents

Workflow Automation

Builds automations for sales and CRM work and for reporting, taking repetitive tasks off the plate so more time goes to conversations and decisions. Every automation keeps a human in the loop — it drafts and recommends, a person reviews and approves — and is built with security in mind, with deliberate care for credentials, permissions, and data access.

  • Sales & CRM
  • Reporting
  • Human-in-the-Loop
  • Secure Automation

Built With AI: This Site

This website was built with AI, not the older playbook of hand-coding every page, stacking plugins on a heavyweight CMS, or waiting in a developer queue. No database, no plugin sprawl: just fast static pages and a small custom tool. It’s a working example of where web development is headed.

  • Claude Code
  • Custom CMS

Threat Intelligence

Security Briefs.

A weekly read on what's actually being exploited — CISA KEV additions, actively exploited vulnerabilities, and the defensive priorities that follow — plus field notes on zero trust, risk, and exposure management.

Weekly Cyber Intelligence

Exploited Linux Kernel Flaws, Cisco Zero-Days, and a Seven-CVE KEV Week

Seven vulnerabilities hit CISA's KEV catalog Sept. 13–20 — including a CVSS 10.0 Cisco ISE bypass and three Linux kernel flaws.

Sept. 21, 2026 · ~14 min read

Weekly Cyber Intelligence

KEV Volume Doubles as Exploited Flaws Hit Edge, Developer, and AI Infrastructure

14 vulnerabilities hit CISA's KEV catalog Sept. 6–13 — double the prior week — spanning edge devices, developer platforms, and a new AI warning.

Sept. 14, 2026 · ~17 min read

Coming Soon

Zero Trust, Without the Buzzwords

What “never trust, always verify” actually means for a regulated organization with a small security team.

Coming Soon

Risk Awareness: Severity Isn’t Risk

Why a CVSS score alone misleads — and how to rank exposure by what attackers are actually exploiting.

Coming Soon

Shadow AI: Finding What You Can't See

Sanctioned or not, AI usage is happening inside your org right now. Here's how to find it.

Continuing Education

Certifications.

42 courses & certifications

Cybersecurity · 35  (zero trust & risk awareness highlighted)

Privileged Access Management Building a Modern Insider Threat Program Cloud Governance Principles Vulnerability Management MITRE ATT&CK Fundamentals Privileged Password Security Nessus Fundamentals Enterprise Security Leadership: Creating a SOC Vulnerabilities: App, Data & Host Security Vulnerability Management Fundamentals Information Security Fundamentals Intro to InfoSec Security Engineering Corporate Cybersecurity Modern Security Challenges Cybersecurity Career Paths Chief Information Security Officer Network Architecture Network Security OSI Model TCP/IP CompTIA Network+ Incident Management Malware Fundamentals Social Engineering Phishing Sniffing Injection Flaws SQL Injection Computer Forensics Kali Linux Fundamentals Cryptography Cryptography Fundamentals Mobile Device Security How to Use Tor

Sales & Professional Development · 7

Technical Sales High-Performing Sales Teams Sales Management Negotiation Skills Command of the Message Everyday Productivity with Claude Cowork Strategic Prompt Engineering: From Fundamentals to Expertise

Cybersecurity continuing education via Cybrary and CompTIA.

Contact

Let's talk about what you're trusting.

Whether it's a zero trust conversation, a risk review, a platform health check, or an advisory engagement — drop a line and I'll get back to you within one business day.

  • Annapolis, Maryland — serving the DMV, with travel available
  • Mon–Fri: 9am – 6pm

    Saturday: 9am – 12pm

    Sunday: Closed

Opens your email client with this message pre-filled.