RI

Rotimi Ishola — Cybersecurity Analyst

SOC & Detection · threat hunting · security write-ups
Düsseldorf, Germany
About

I'm a cybersecurity analyst focused on SOC operations and detection engineering. My day-to-day lives on the blue side — triaging alerts, validating IOCs, and investigating in Splunk and QRadar — but I spend just as much time with offensive tooling, because the fastest way to catch an attack is to understand how it's run.

I build detection tooling in C++ and Python, and I write hands-on security walkthroughs that pair each attacker step with what it leaves behind for defenders. Always learning, always shipping.

Skills

SOC / SIEM & detection

Splunk ES (SPL, dashboards, alerting) IBM QRadar CrowdStrike EDR Alert triage Incident response IOC validation TheHive

Security & detection engineering

C++17 detection engines Python Bash libFuzzer / fuzz testing CI/CD (GitHub Actions, Azure DevOps)

Offensive / vulnerability

Nmap Burp Suite Metasploit Nessus OpenVAS Kali Linux CVE / CVSS analysis

Cloud & network

Microsoft Azure (VMs, Entra ID/IAM, VNet, VMSS) Active Directory & GPO TCP/IP · OSI Wireshark / PCAP Firewalls · VPN · IDS/IPS

Frameworks

MITRE ATT&CK NIST CSF / 800-53 ISO 27001 BSI IT-Grundschutz OWASP Top 10 CIS Controls NIS2 · DORA · DSGVO
Certifications
CompTIA Security+ (SY0-701)2025
CRANIUM AI Security Professional2026
Cisco Endpoint Security2026
Splunk — Investigation & SIEM Ops2025
TryHackMe SOC Level 12025
CI/CD & DevOps Foundations2024
In progress  ·  CompTIA CySA+ · Microsoft SC-200 · GIAC GCTI · eJPT · CompTIA PenTest+
Writing
Metasploit: The Basics — TryHackMe Walkthrough
Featured The Ink Home · blue-team detection angle
Talking a Calendar Bot Into Leaking Sales Data — LLMborghini Walkthrough
Medium · LLM prompt-injection
PHP2Shell: How a Progress Bar Became Unauthenticated RCE on 14 Years of PHP
Medium · CVE-2026-109618/109619
Why You Can't Patch Prompt Injection — Prompt Defence Walkthrough
The Repo · LLM security
What I Learned by Building a Security Log Analysis Engine in C++
Medium · Sentinel Log Core
All articles on Medium →
Full archive
Connect