IT Strategy & Cybersecurity Advisory

Operator intelligence.
Executive clarity.

30+ years navigating the hardest environments in federal intelligence, defense, and critical infrastructure. I help organizations see what others miss — and make decisions that hold up under pressure.

30+
Years in the field
IC & DOE
Federal experience
OT/IT
Convergence expertise
Zero
Vendor allegiances

I don't sell products.
I don't have preferred vendors.

I have a methodology: understand your mission, understand your constraints, and find the path that works in the real world — not just on a slide deck.

My perspective comes from environments where the word "disruption" is not a compliment. The NSA. The Department of Energy. Critical infrastructure operations where downtime is measured not in dollars, but in consequences.

I have spent 30 years watching the same pattern repeat: the tool gets purchased, the demo was flawless, leadership is confident — and then the real work begins. That is the problem I solve.

"How will your tool make an analyst's life easier? Not in a demo — in real operations."

— The question I ask every vendor
José A. Cedeño
CloudCurrent LLC Current
Senior Advisor — strategy, BD & operations
TerraceLab Current
Technical Advisor (via Cofresí Consulting)
National Security Agency
Technology evaluation & intelligence operations
Department of Energy
Technology evaluation & critical infrastructure ops
Federal Intelligence Community
Senior advisory practice
OT & Industrial Networks
IT/OT convergence specialist

The name

Cofresí Consulting takes its name from Roberto Cofresí — legendary privateer of Cabo Rojo, Puerto Rico, our founder's hometown. Bold in waters the powerful claimed to control. Loyal to those the establishment ignored. Captured in 1825, his name never died in Cabo Rojo. That same spirit defines every engagement.

The Cofresí method.

Four principles. Every engagement.

01
Map the dark segment
Every network has blind spots — decommissioned devices still online, undocumented protocols, shadow infrastructure invisible to your asset inventory. We find what others miss before an adversary does.
02
Validate against reality
We pressure-test every tool and solution against real operational constraints — not vendor demos. If it can't perform in your environment, with your legacy systems, it doesn't make the cut.
03
Eliminate the integration tax
The biggest barrier to security value isn't the threat — it's the time spent building parsers and normalizing data before a tool produces a single useful insight. We remove that friction.
04
Arm the decision maker
Operator-grade findings translated into executive-ready clarity. Boards and CISOs get the context they need to make high-stakes investments that hold up under scrutiny — and under pressure.

Built around your mission, not ours.

Every engagement is shaped by your real-world constraints — budget, legacy systems, organizational dynamics, and all.

IT Strategy & Roadmapping
Technology decisions that are realistic, prioritized, and defensible to leadership and boards. Roadmaps that survive contact with the budget cycle.
Cybersecurity Advisory
Practical guidance grounded in operational reality — not checkbox compliance. From risk assessment and program maturity to threat hunting strategy and vendor evaluation.
OT & IT Convergence
Bridging the gap between operational technology and enterprise IT with a clear understanding of what's at stake on both sides — production continuity, safety, and security.
Technology Assessment
Objective evaluation of tools, vendors, and architectures. We cut through marketing claims and find what will actually work in your environment — before you sign the contract.
Digital Transformation
Modernization strategies that account for people and processes, not just technology — because that's where most initiatives actually fail, not in the architecture, but in the adoption.
Executive Advisory
A trusted thinking partner for CIOs, CISOs, and CTOs navigating high-stakes decisions. Available on retainer or project basis — a cleared perspective when it matters most.

Perspectives worth reading.

Written for practitioners, not pundits.

Series — Governing the human layer
A series on behavior, technology, and the future of organizational resilience
01
The biological mismatch
Running 21st-century software on 50,000-year-old hardware. Why the human brain hasn't caught up — and what that means for how we govern, lead, and adapt.
02
Your firewall can't stop this one
AI governance isn't about blocking an app — it's about governing human behavior. Traditional playbooks are failing against tools this embedded in daily problem-solving.
03
AI isn't a tool. It's a behavior.
The companion playbook. From "restrict and control" to "equip and guide."
04
A dynamic zero trust framework with out-of-band human sovereignty
No automated system shall be the sole authority on its own health.
05
When "green" systems fail: why human sovereignty still matters
Aviation case study. Human fatigue, a poisoned operational baseline, and the Cognitive Fusion Engine.
07
The baby doesn't know it can't
AI's confidence miscalibration, the hype that created it, and the human role that corrects it. The Nurturer–Parent–Friend–Advisor arc.

More perspectives

Critical Infrastructure · OT
The lights are still on. For now.
Fragmentation doesn't cost you data. It costs you power.
Read →
Strategy
The operational blind spot
Asset health, unified intelligence, and the adversary already inside.
Read →
Strategy
The eternal loop
From mammoth tracks to network packets — the mission has never changed.
Read →
Strategy · VStrike
VStrike & the dark segment
The moment a platform reveals a device no one knew existed, the room shifts.
Read →
OT Security
The air gap is a myth
Dual-homed laptops and rogue access points prove otherwise — invisibly.
Read →
Critical Infrastructure · VStrike
Modern IT/OT threats have outgrown the air gap
Validated at 100% accuracy in a national nuclear security exercise.
Read →

Let's talk about what you're solving.

No sales pitch. No vendor agenda. Just a direct conversation about your situation and whether I'm the right fit to help.

Your message goes directly to José A. Cedeño.
[email protected]

← Back to insights