Daniel López

Part of Okta’s Identity Threat Research team, researching identity-focused threats and attacker tactics, techniques and procedures.

A few pieces of research published on the Okta Threat Intelligence blog:

• Aug. 23, 2026First on the scene of the (cyber)crime
• May 2, 2026Tycoon 2FA phishing actors disperse, branch into new attacks
• Dec. 19, 2025Jobseekers exploited in fake recruiter phishing campaigns
• Sep. 30, 2025EvilProxy phishing campaign leverages convincing impersonations of enterprise applications
• Aug. 28, 2025Attackers target hotelier accounts in malvertising and phishing campaign
• Jun. 19, 2025How this ClickFix campaign leads to Redline Stealer

Worked in Cloud Software Group’s global Security Operations Center, handling 24/7 incident response, threat hunting and detection tuning.

Key Responsibilities:

• Analyzed, contained and remediated malware, malicious email campaigns, fraud and abuse, insider threats and data-loss incidents
• Hunted threats and researched malware and phishing campaigns, translating findings into concrete mitigations
• Partnered with SIEM and Detection Engineering to tune alerts, reduce noise and improve detection performance

Worked in Banco Santander’s Global SOC, providing 24/7 monitoring and an on-call service to the bank’s entities worldwide.

Key Responsibilities:

• Performed in-depth investigation and mitigation of security incidents
• Monitored web traffic and critical SWIFT assets, investigating malware, phishing, DDoS and brute-force activity
• Supported fraud prevention across phishing, suspicious email, compromised cards, mule accounts, data leaks and impersonation

Worked in Deloitte’s CyberSOC, delivering managed security services for national and international clients.

Key Responsibilities:

• Conducted initial triage of SIEM alerts to identify potential threats
• Applied playbooks and immediate containment or remediation measures when required
• Escalated potential incidents with the context and evidence needed for further investigation

Advanced study of telecommunications networks and systems, including network architecture, signal processing, wireless communications and network security.

Foundations in telecommunications engineering, computer science and software development.