David Valencia Santos Email and Phone Number

▪ Configure the customer profile captured via the Customer Enrolment Package (CEP).▪ Monitor and detect the intelligence alerts that are triggered by the Threat Intelligence systems.▪ Fine tuning and proposal of intelligence alerts.▪ Assess the credibility and relevance of threat intelligence information.▪ Analyse trends to understand how customers can be attacked in the future and to be protected proactively.▪ Generate or provide support for the pertinent documentation regarding the runbooks and playbooks for the Threat Intelligence service.▪ Triage and analyse the intelligence alerts defining recommendations to protect against the cyber threats.▪ Evaluate the potential impact of threats on the organization’s security.▪ Investigate security advisories relevant for the customer’s industry sector.▪ Investigate the threat landscape for the customer and its business sector, such as threat actors and their activity, malware, TTPs, campaigns and vulnerabilities.▪ Investigate the global threat landscape providing a high-level vision across all the sectors

▪ Organization of shifts related to level 2 equipment (24/7)▪ Linking line between the level 2 and level 3 team.▪ Development and communication of documentation for new processes.▪ Elaboration of the respective quality assurance reports for each customer.▪ Further investigation and analysis of major incidents and subsequent forensic evaluation.

Monitoring and Detection:▪ Monitor and analyze alerts generated by the Security Information and Event Management System (SIEM).▪ Identify and assess potential threats using data from multiple sources.Analysis and Response:▪ Investigate security incidents using EDR (Endpoint Detection and Response) and OSINT (Open Source Intelligence) tools.▪ Classify and prioritize incidents according to impact and urgency.▪ Develop and execute incident response plans.Collaboration and Communication:▪ Work closely with other IT and security teams to coordinate incident responses.▪ Document and communicate incident findings and actions taken to relevant stakeholders.Continuous Improvement:▪ Participate in post-incident reviews to identify areas for improvement and update incident response procedures.▪ Keep up-to-date with the latest threats, vulnerabilities and industry best practices.

▪ Basic knowledge in analytical cybersecurity, focusing the training on the use of different SIEMS and EDR's, with the objective of being self-sufficient in incident and response service.