Open to opportunities

Dan White

@danwhite1

Message

Cybersecurity analyst specializing in threat intelligence and incident response.

United Kingdom

Message

What I'm looking for

I seek a hands-on security role focusing on threat intelligence, incident response, and cloud detection, with opportunities to mentor and improve SOC processes.

I am a passionate cybersecurity professional focused on threat intelligence and incident response, with hands-on experience protecting large enterprise operational environments.

At EDF Energy I lead investigations into suspicious emails, attachments and malware using tools such as Palo Alto WildFire, Hybrid-Analysis and OSINT platforms, and I develop KQL queries to improve detection in Azure Sentinel and Microsoft Defender.

I author playbooks, conduct training for new team members, prepare clear incident reports for stakeholders, and brief senior leaders to drive swift remediation of high-risk findings.

I hold relevant certifications including Microsoft Certified: Security Operations Analyst Associate (SC-200), Fortinet NSE 1 & 2, AWS Security Fundamentals learning, KQL training, and maintain SC Clearance.

Experience

Work history, roles, and key accomplishments

Current

Security Incident Analyst

Current

EDF Energy

Dec 2019 - Present (6 years 6 months)

Led incident response and malware investigations across EDF’s operations, improving detection through KQL-driven Sentinel rules and escalating high-risk findings for swift remediation. Developed playbooks, delivered training, and produced stakeholder-facing reports to strengthen enterprise cyber defence.

Incident Response Malware Analysis Azure Sentinel Microsoft Defender OSINT ServiceNow Threat Intelligence Mimecast