Mathieu Donders

Independent security consultant with daily practice at a Managed Security Provider (MSSP): detection engineering, threat hunting, incident response, and security automation for enterprise environments.

My focus is on Microsoft security (Sentinel, Defender XDR, Entra, Microsoft 365, and Azure), complemented by broader cloud and SIEM expertise. I translate complex security into concrete, scoped improvements: detection rules that are accurate, a SIEM that doesn't overflow with noise, and hardening that is measurable.

Where I excel:

• Detection engineering and KQL in Microsoft Sentinel, as ongoing engagement or as a health check.

• Microsoft 365 and Azure security hardening: Conditional Access, Defender XDR, Entra ID, Intune.

• Security automation with Logic Apps and playbooks.

I work project-based and part-time, remotely with on-site possible in the Breda region. Deliverable-oriented, with clear documentation and handover so your team can continue internally. No fear-mongering, but substantiated advice.