Looking for a job

Dan Gapco

@dangapco1

Cyber incident response analyst across MediaMonks and CIRT teams, investigating phishing, malware, and advanced threats.

Slovakia

Message

What I'm looking for

I'm looking for hands-on, investigative Cyber Security Incident Response CIRT Analyst roles at level 2–3, with some malware analysis, threat hunting, or IR forensic analysis. I prefer mostly fully remote roles in EMEA or worldwide, focused on cyber alerts, threats, phishing, and in-depth investigations—not engineering, DevOps, management, leadership, or generic infosec roles.

At MediaMonks, I monitored and investigated escalated cyber incidents across Apple MacOS and Windows devices. I analyzed phishing emails, malicious files, and malware, and conducted basic static and dynamic malware analysis.

In my current Senior Security Analyst role, I analyze security alerts, incidents, and threats, including phishing and malware. I also conduct occasional threat hunting and contribute to root cause analysis and post-mortem reviews.

At OpenSystems, I investigated alerts from EDR, SIEM, and next-generation antivirus systems, and regularly hunted for advanced malware and threats. I also authored and improved incident response runbooks, playbooks, and operating procedures.

Earlier, at FORD MOTOR COMPANY, I investigated security incidents, performed endpoint forensic analysis, and extracted indicators of compromise. I also conducted threat hunting and malware analysis, and helped improve incident response capabilities across the roles listed in my career.

Experience

Work history, roles, and key accomplishments

Current

Senior Security Analyst

Current

Currently Undisclosed NDA

Jul 2025 - Present (1 year 3 months)

Monitoring and analyzing cyber security alerts and incidents on MacOS and Windows devices. Conducting phishing analysis, static malware analysis, and threat hunting.

EDR SIEM Malware Analysis Phishing Analysis Threat Hunting MacOS Windows

Senior Incident Response Analyst

MediaMonks

Jul 2022 - Oct 2024 (2 years 3 months)

Monitored and analyzed cyber security alerts and incidents, conducted phishing and malware analysis, and performed threat hunting. Managed high priority incidents and facilitated root cause analysis.

EDR SIEM Malware Analysis Phishing Analysis Threat Hunting Incident Response MacOS Windows

Cyber Security Analyst Consultant

OpenSystems

Nov 2020 - Dec 2021 (1 year 1 month)

Proactively monitored alerts in the Cyber Security Center, investigated suspicious alerts, and conducted threat hunting. Authored IR runbooks and playbooks, and supported SOC Tier 1 and Tier 2.

EDR SIEM Threat Hunting Incident Response Run Books Playbooks SOC

CIRT Security Specialist

Worldpay

May 2019 - Apr 2020 (11 months)

Analyzed escalated cyber incidents and alerts, performed static and dynamic malware analysis, and provided forensic analysis. Improved incident response and DFIR capabilities.

Incident Response Malware Analysis Forensic Analysis SIEM EDR Threat Intelligence

Incident Response Analyst

Bupa Insurance

Nov 2018 - Apr 2019 (5 months)

Monitored and analyzed escalated alerts and cyber incidents, investigated malicious activities, and improved incident response procedures and user guides.

Incident Response SIEM EDR Threat Intelligence Malware Analysis

Incident Response Analyst

Photobox Group

Mar 2018 - Jul 2018 (4 months)

Investigated malicious activities, files, and emails, performed static and dynamic malware analysis, and created SOC user guides and runbooks.

Incident Response Malware Analysis Darktrace IDS IPS Threat Intelligence

Senior Incident Response Analyst

Schroders

Jan 2017 - Jul 2017 (6 months)

Analyzed escalated incidents from managed security providers, performed static and dynamic malware analysis, and conducted deep network packet inspection. Advised MSSP on improving triage and response.

Incident Response Malware Analysis Network Analysis Wireshark SIEM Proxy

Cyber Security Analyst

Ford Motor Company

Mar 2015 - Jan 2017 (1 year 10 months)

Handled intrusion detection and response, investigated security breaches, and conducted endpoint forensic analysis. Led the team and trained new colleagues, and extracted IOCs from malware.

SIEM FireEye Mandiant IDS IPS Wireshark Encase Network Miner Threat Hunting Forensic Analysis

IT Systems Analyst

Towergate Insurance

Aug 2014 - Dec 2014 (4 months)

Managed user access and security groups in Active Directory, fixed security issues from audits, and provided troubleshooting for user accounts and systems.

Active Directory Exchange Citrix Security Groups Troubleshooting

IT Security Support

Ministry of Justice

Oct 2012 - Mar 2014 (1 year 5 months)

Analyzed social engineering attempts, advised on security procedures, and provided VIP support and training on secure GSI network and applications.

Security Awareness RSA SecurID Encryption Troubleshooting Training

IT Support Analyst

Herbert Smith Freehills

Feb 2012 - Jul 2012 (5 months)

Monitored servers for malicious signs, analyzed blocked emails using MimeCast, and provided desktop and server support within SLA.

Mimecast VPN RSA SecurID ITIL Troubleshooting

Technical Support Analyst

Mishcon de Reya

Oct 2011 - Jan 2012 (3 months)

Checked servers for malicious signs, managed SecureID access, and provided remote desktop support and troubleshooting for VPN and authentication issues.

RSA SecurID VPN Authentication Troubleshooting Remote Support

IT Support/Administrator

Ralli Solicitors LLP

Feb 2011 - Aug 2011 (6 months)

Ran daily virus scans, removed threats, and securely wiped and reinstalled operating systems. Provided desk side support and managed security software deployments.

Antivirus Endpoint Security Firewalls TCP IP VPN Troubleshooting