Donald Murchison is a Staff Security Detection Engineer with nine years of experience designing and operationalizing enterprise SIEM and detection platforms, currently building threat detection use cases and cloud-native systems at ServiceNow. He holds an MS in Cybersecurity from NYU Tandon and previously led a zero-downtime migration to Splunk at HPE, automating forwarder deployments with Ansible and saving analysts over 100 hours per week through Risk Based Alerting. Donald pairs hands-on digital forensics and incident response experience with software-engineering practices—authoring custom Splunk commands, tuning frameworks, and semi-automated content pipelines—to turn raw telemetry into actionable detections. He also collaborates with data scientists on novel ML-based detection models and contributes write-ups and tooling to the community via his personal site. A pragmatic problem-solver, he combines deep operational knowledge with a curiosity for research evidenced by competition participation and forensic tool development.
9 years of coding experience
4 years of employment as a software developer
Master of Science - MS, Cybersecurity, Master of Science - MS, Cybersecurity at NYU Tandon School of Engineering
Custom Splunk search command to reconstruct a pstree from Sysmon process creation events (EventCode 1)
Contributions:8 commits, 6 PRs, 8 pushes in 3 years 2 months
eventspstreepythonsysmonsplunk
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.
Request Free Trial
Donald Murchison - Staff Security Detection Engineer at ServiceNow