Diego Borghgraef

Senior Cyber Security Consultant with four years at EY, working on defensive security, cyberfootprinting and cyber assessments for mergers and acquisitions. Comfortable moving between architecture, investigation and hands-on testing, and writing the scripts and automation that keep it running.

• SIEM and SOC implementation with Microsoft Sentinel, including detection engineering, SOAR, threat hunting, incident response and ransomware forensics.
• Cyberfootprinting and external attack surface work: exposure discovery, OSINT, breach intelligence, metadata and OCR analysis, and automated reporting.
• Cybersecurity M&A assessments and due diligence under restricted access and short deadlines.
• Cloud, Kubernetes, OT and authorised offensive assessments across government, transport, pharmaceuticals, food production and critical infrastructure.

Defensive

SIEM, SOC, SOAR, detection engineering, threat hunting, incident response, forensics

Cyberfootprinting

OSINT, attack surface management, breach intelligence, automation

M&A

Cyber assessments, due diligence, fieldwork, reporting

Cloud

Azure, IAM, CIS benchmarks, Kubernetes, Intune, DevSecOps

OT

Asset discovery, vulnerability assessment, posture reviews

Offensive

Authorised web, infrastructure, mobile and purple-team testing

Tools

Sentinel, Splunk, CrowdStrike, KQL, Burp Suite, Nmap, Kali

Governance

ISMS, ISO 27001, NIS2, CyFun, risk management

• SC-200 - Microsoft Security Operations Analyst
• AZ-900 - Microsoft Azure Fundamentals
• CCNA - Cisco Certified Network Associate

Bachelor Information Security - Thomas More

Dutch, French, English