Santiago Lopez de Toledo
Santiago Lopez de Toledo

Santiago Lopez de Toledo

Intelligence, investigations & geopolitical risk analysis

I investigate how state and criminal actors operate, from the technical tradecraft of a cyber operation to the geopolitical and strategic intent behind it. My work runs across threat intelligence, counterintelligence and counterterrorism analysis, open-source investigation, and the legal and economic frameworks that turn raw findings into decisions.


Experience

May–Aug 2026

Technical Writer Intern

Rubrik · Zero Labs, Palo Alto, CA

  • Investigate threat actors and adversary infrastructure using Google Threat Intelligence and OSINT, attributing activity and profiling motivations against MITRE ATT&CK
  • Build Python pipelines and automated workflows to triage high-volume signal, surfacing AI-powered malware used by 5 distinct state-sponsored threat groups
  • Write and tune YARA rules against live malware samples, iterating detection logic against real-world attack data
  • Contributed research to a published Rubrik Zero Labs threat report examining the TeamPCP threat group and its supply-chain impact
  • Translate investigative findings into finished intelligence products and executive-facing briefings for security leaders at Fortune 500 and G2K organizations
Jan–May 2025

Tech Consulting Analyst

NTT Data, Madrid, Spain

  • Produced threat intelligence and geopolitical risk analysis for Banking and Public Sector clients under NIS2 and DORA
  • Wrote finished intelligence memos translating regulatory, threat, and geopolitical developments into actionable insight for senior stakeholders
  • Assessed and helped remediate 12+ high-risk third-party vulnerabilities per client
May–Aug 2023

Investment Analyst Intern

Abante Asesores, Madrid, Spain

  • Synthesized geopolitical and economic trends into written briefings for portfolio managers
  • Contributed to 8–10% portfolio growth through data-driven competitive intelligence

Education

2025–2026

MSc, Global Security, Conflict and Cybercrime (STEM)

New York University · School of Professional Studies

GPA 3.9 · Focus: national security & counterterrorism · Coursework: Cyber Threat Intelligence, MITRE ATT&CK, OSINT, Cyberwarfare, Economic Espionage, National Security and Critical Infrastructure Resilience

2020–2025

BSc, Data Analytics and International Relations (STEM)

Universidad Pontificia Comillas ICADE, Madrid

Coursework: Machine Learning, Statistics, Calculus, Linear Algebra, Regression Analysis, International Markets, Geopolitical Conflict, International Law, Modern History, Financial Modeling

2023

Exchange, University of Michigan

Ross School of Business, Ann Arbor, MI

Financial Modeling, Financial Trading, Collective Intelligence, Financial Management


Skills

Intelligence & Investigations

Threat actor attribution & profiling, counterintelligence & counterterrorism analysis, OSINT investigation, geopolitical & economic risk analysis, MITRE ATT&CK, structured analytic techniques, finished intelligence writing, executive briefing

Technical & Tooling

Python, SQL, Google Threat Intelligence, automated detection pipelines, workflow automation, YARA rule development, malware analysis, AI-assisted detection, Tableau, Power BI


Languages & Interests

Languages

English / Spanish (bilingual) · French (beginner) · Russian (beginner)

Interests

Music: independent artist, 1 album and 2 EPs released, 100K+ streams on Spotify · NYU Poker Club · Hiking · Basketball, Team Captain for 4 years (Club Baloncesto Alcobendas)