DANIEL THURSTON

Skills & Technologies

SIEM & Detection Engineering

Elastic Stack·Intermediate
Log correlation·Intermediate
Alert tuning·Intermediate
Windows Event Logs·Intermediate
SPL·Beginner
KQL·Beginner
IBM QRadar (familiarity)·Beginner

Incident Response, SOAR & Automation

Alert triage·Intermediate
Incident lifecycle·Intermediate
IOC handling·Intermediate
MITRE ATT&CK mapping·Intermediate
Log analysis·Intermediate
Playbooks and runbooks·Beginner
Python (automation basics)·Beginner
PowerShell (basics)·Beginner
Bash (basics)·Beginner

Offensive Security Fundamentals

External black box testing·Beginner
Vulnerability identification and validation·Beginner
OWASP Top 10·Beginner
Linux·Intermediate
Burp Suite·Beginner
Nmap·Beginner
Nessus·Beginner
OWASP ZAP·Beginner
Reconnaissance·Beginner
Evidence capture·Intermediate

Cloud Security & Compliance

GCP (IAM basics)·Beginner
AWS (IAM basics)·Beginner
Identity and Access Management (IAM)·Beginner
NIST CSF·Beginner
ISO 27001·Beginner
CIS Benchmarks·Beginner

Soft Skills

Attention to detail·Advanced
Stakeholder and client communication·Advanced
Ownership and reliability·Advanced
Team collaboration·Advanced

Languages

English·Expert
German (B1-B2)·Intermediate