{
  "about_me": {
    "name": "David Pena",
    "current-role": "Tech Support Engineer",
    "current-career-focus": "Cybersecurity Engineer"
  }
}

SCROLL TO EXPLORE

security · cloud · python · ai

DAVID
PENA

Building at the intersection of cybersecurity, cloud, Python, and AI.

Cybersecurity-focused Technical Support Engineer building hands-on projects in threat hunting, identity, cloud security, and AI-assisted security automation.

View Projects → GitHub LinkedIn

DAVID PENA

Cybersecurity-focused Technical Support Engineer

SCROLL TO EXPLORE

01 / CURRENT FOCUS

Currently Building

AI + SECURITY

Agentic SOC Analyst

An AI-powered threat hunting assistant that translates natural-language security questions into KQL, queries Microsoft Defender / Azure Log Analytics telemetry, and analyzes results to accelerate investigations.

Python KQL Azure Microsoft Defender Log Analytics LLM

Live Demo → GitHub →

USER

Has windows-target-1 had suspicious logons in the last 72 hours?

AGENT

Querying DeviceLogonEvents...

KQL

DeviceLogonEvents
| where DeviceName == "windows-target-1"
| where Timestamp > ago(72h)
| where ActionType == "LogonFailed" or IsExternalIp == true
| project Timestamp, AccountName, RemoteIP, ActionType

02 / SELECTED WORK