Working in Technical Intelligence team, identifying and investigating APT campaigns.

Worked as part of the Intelligence team and the Threat Management team, whilst also opportunistically working on automation of tasks by integrating into the API of used platforms.Currently in Technical Intelligence investigating APT campaigns.Intelligence work included performing research and report writing about APTs and threat actors, including different threats across the globe, hacker motivations and observed attack methods. Additional automation was performed to help ingest intelligence reports and IOCs into the TIP.Threat Management work includes searching and hunting for IOCs, and acting upon those found in network and device logs. Developed a good understanding of the MITRE ATT&CK framework underpinning many of the queries developed. Additionally help to assess new vulnerabilities to minimise risk to the company.

Dissertation in AI using neural networks for real-time DGA domain and phishing URL mitigation implemented via proxy.

Industrial placement for 1 year in BT covering three different technical roles within the security department.This includes:- Advanced threat hunting- Malware analysis- Penetration testing