Daniel Williams

I’m a cybersecurity professional with hands-on experience in SIEM monitoring, alert triage, and vulnerability scanning, using Wazuh and Google Chronicle to support incident response and threat intelligence. I also enrich investigations with Recorded Future and validate indicators with tools like VirusTotal and AbuseIPDB.

In my Cyber Security Analyst Intern role at Nexus Grid, I monitored and analyzed 30+ daily security events, investigated IOCs, and supported incident response by triaging alerts, escalating critical threats, and maintaining post-incident documentation. I performed basic malware analysis and threat research within Linux environments to strengthen investigation outcomes.

I continuously build practical capability through my SOC Home Lab (Wazuh), where I centralize endpoint and network logs for real-time alert monitoring. I detect and triage SSH brute-force attacks, develop custom Wazuh detection rules, and use MITRE ATT&CK tactics to flag suspicious behaviors, including File Integrity Monitoring (FIM) for unauthorized file changes.

I’m ISC2 Certified in Cybersecurity, and I hold CompTIA Security+ and CySA+—and I’m focused on joining a team where strong documentation, clear escalation, and measurable detection improvement are valued.