Looking for a job

Dafni Geortzi

@dafnigeortzi

Senior Cyber Threat Intelligence Analyst at XM who established its CTI capability and operationalized its Threat Intelligence Platform.

Greece

Message

At XM, I established and matured the Cyber Threat Intelligence capability by defining its processes, collection workflows, reporting standards, and operational practices.

I produce strategic, operational, and tactical intelligence, including threat assessments, threat actor profiles, and executive briefings. I also lead dark web intelligence operations and conduct threat modelling and adversary analysis.

I operationalized XM's Threat Intelligence Platform, designing workflows for collection, enrichment, analysis, and dissemination. I work with Security Operations, Incident Response, and Detection Engineering to turn intelligence findings into defensive improvements.

Earlier, I supported SOC operations and incident response at XM, and worked in security delivery, cybersecurity analysis, and information security roles at Accenture Greece, Obrela Security Industries, and Neurosoft SA.

Experience

Work history, roles, and key accomplishments

Current

Freelance Cybersecurity Consultant

Current

Confidential Major Organization

Jan 2025 - Present (1 year 9 months)

Provide Threat Intelligence and Detection Engineering support to enhance SOC maturity, security monitoring capabilities, and detection effectiveness. Assess and optimize detection coverage by reviewing existing use cases and aligning improvements with threat intelligence and adversary TTPs.

Threat Intelligence Detection Engineering SOC Security Monitoring Use Case Optimization Playbooks Triage Client Onboarding

Current

Senior Cyber Threat Intelligence Analyst

Current

Nov 2023 - Present (2 years 11 months)

Established and matured the organization's Cyber Threat Intelligence (CTI) capability by defining intelligence processes, governance, collection workflows, reporting standards, and operational procedures. Produce strategic, operational, and tactical intelligence products including threat assessments, threat landscape reports, threat actor profiles, and executive briefings.

Threat Intelligence CTI Intelligence Requirements Data Collection And Analysis Strategic Operational Tactical Reporting Threat Analysis Threat Profiling Threat Modeling MITRE ATT&CK Dark Web Intelligence OSINT Threat Intelligence Platforms SIEM Detection Engineering Incident Response

Information Security Analyst

Sep 2021 - Oct 2023 (2 years 1 month)

Served as an escalation point for security incidents, supporting SOC operations, investigations, and incident response activities. Coordinated incident response efforts, developed playbooks and triage procedures, and improved investigation workflows.

Security Operations Incident Response SOC SIEM Use Case Development Detection Tuning Threat Analysis Bass Attack Trees Tabletop Exercises

Security Delivery Analyst

Accenture Greece

Dec 2020 - Sep 2021 (9 months)

Delivered enterprise security consulting services across multiple security domains including cloud security, infrastructure security, identity and access management, and vulnerability management.

Cloud Security Infrastructure Security IAM Vulnerability Management Security Architecture Review Security Risk Assessment Security Controls Engineering

CyberSecurity Analyst

Obrela Security Industries

Sep 2019 - Dec 2020 (1 year 3 months)

Performed security monitoring and incident investigation within a multi-client SOC environment. Investigated and escalated security incidents according to customer-specific Rules of Engagement.

Security Monitoring incident investigation SOC SIEM Content Optimization False Positives Reduction Tuning Malware Analysis Attack Pattern Identification Threat Hunting

Information Security Analyst

Neurosoft SA

Jun 2018 - Sep 2019 (1 year 3 months)

Monitored enterprise environments for cyber threats and security incidents. Conducted OSINT investigations, threat research, and security event analysis.

Security Monitoring Incident Response OSINT THREAT RESEARCH Security Events And Logs Analysis Vulnerability Assessment