Bert-jan Pals
Senior Incident Responder at ING
Netherlands
Summary
🤩
Rockstar🎓
Top SchoolBert-jan Pals is a Senior Incident Responder based in the Netherlands with four years of focused experience in blue team operations, threat detection, and security research. He blends hands-on incident response at ING with continued research contributions at Invictus IR, where he helped develop tools like ALFA and Sigma-AWS to map events to the MITRE ATT&CK framework and automate forensic analysis. Skilled in KQL, Sentinel, and XDR, he publishes practical detection tooling (e.g., kqlquery.com) and maintains an active open-source presence that surfaces real-world detection patterns. His background spans SOC leadership and software engineering, giving him a pragmatic edge in turning research into operational detections. Collected academic training in security, networking and data science underpins his approach to measurable, repeatable threat hunting.
3 years of coding experience
2 years of employment as a software developer
Minor Data Science, Minor Data Science at Vrije Universiteit Amsterdam (VU Amsterdam)Havo Natuur & Techniek, Havo Natuur & Techniek at Christelijk Lyceum DelftMaster's degree Security & Network Engineering / OS3, Master's degree Security & Network Engineering / OS3 at University of AmsterdamBachelor's degree HBO-ICT Software Engineering specialisatie Cyber Security, Bachelor's degree HBO-ICT Software Engineering specialisatie Cyber Security at De Haagse Hogeschool / The Hague University of Applied Sciences
Dutch, English
Github Skills (32)
vulnerability-management10
threat-hunting10
infosec10
cybersecurity10
analytics10
security10
mdi10
malware10
mde10
azure-sentinel10
blueteam10
phishing10
azure10
endpoint10
sentinel10
Programming languages (5)
Github contributions (5)
Bert-JanP/Hunting-Queries-Detection-Rules
May 2022 - Jan 2023
KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.
Contributions:183 commits, 46 PRs, 526 pushes in 7 months
dfirvulnerability-managementazure-sentinelendpointmdi
Bert-JanP/Open-Source-Threat-Intel-Feeds
Jun 2022 - Jan 2023
This repository contains Open Source freely usable Threat Intel feeds that can be used without additional requirements. Contains multiple types such as IP, URL, CVE and Hash.
Contributions:15 commits, 7 PRs, 52 pushes in 7 months
c2iociocfeedmalwaremisp
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.