Security / Operations / Engineering
A security operations system, end to end.
Signal in, understanding out, and engineering to make the loop better each time. Select a stage.
Telemetry
Where signal originates across an environment.
- Endpoint
- Network
- Cloud
- Identity
Loop · every response and investigation feeds tuning, automation and engineering
Capability map
- 01Security operations
- 02SIEM / detection
- 03Incident investigation
- 04Security engineering
- 05Digital forensics
- 06Security automation
- 07Integrations
- 08Log pipelines
- 09Infrastructure
- 10Software engineering
Systems and frameworks in context
- Wazuh
- QRadar
- OpenSearch
- Netskope
- Suricata
- Wireshark
- Nmap
- Burp Suite
- Volatility
- YARA
- MITRE ATT&CK
- Linux
- Docker
Familiarity with these systems and concepts. This is not a list of certifications or employers.
Security tooling and automation I have built
Current focus
- Security Engineering
- Automation
- SIEM & Detection
- Software Systems
Moving deeper into the engineering layer behind security operations: automation, integrations, infrastructure and software.