Blue / Detect
Detections and pipelines that hold up.
KQL detections, SOAR automation and log pipelines for environments in the 30,000 to 60,000 user range, from local government to federal.
Security engineer / Blue team
DANIELE
RICCIARDELLI
I build the detections that catch attackers.
Computed in your browser and at the edge. Nothing is logged or stored.
Drag the line
01 / Impact
Proof, not adjectives.
Refreshed monthly
02 / Approach
I work both sides of the line, and where they meet.
Red / Break
Testing it the way the other side would.
Everything I build gets attacked before it ships: vulnerability scanners, autonomous pentesting, and adversarial AI models turned loose on it. Then I patch what they find.
Purple / Close the loop
Every finding becomes a control.
Incidents turn into new defenses, and new defenses get re-tested. I build automation that lets analysts contain threats in seconds, with every action logged and reversible.
03 / Latest projects
Fresh off the stack.
The 3 newest from Projects. Updates on its own.
04 / Right now
Always building something.
What I'm working on this month. The timeline has everything else, in order.
See the timeline →The full resume is behind a locked door.
If you're holding my paper resume, you already have the key. If not, just ask.
daniele@dricciardelli.com