Skills
A skill matrix shaped by the SOC floor
Proficiency levels reflect day-to-day operational use — not certification badges alone. Each category maps directly to work I've shipped or defended.
Cybersecurity & SOC
Core discipline — SIEM/EDR/XDR operations, detection engineering, and incident response across MSSP and banking SOCs.
Identity, Email & Network Security
Securing identity, email, and network access across multi-client MSSP environments for highly regulated industries.
Cloud Security
Securing and monitoring identities, workloads, and logs across multi-cloud environments alongside on-premises infrastructure.
Security Automation & Orchestration
Automating detection-to-response workflows and operational tracking — building toward Tines playbooks alongside Linux scripting and infrastructure-as-code.
Software Engineering
A builder's foundation that informs how I think about attack surfaces — full-stack development across modern JavaScript and Java ecosystems.
Applied AI & Research
Exploring the intersection of AI and security — from LLM-assisted workflows to privacy-preserving machine learning research.
SOC Tech Stack
Platforms I operate daily
Currently expanding into
Detection engineering is moving toward cloud-native and infrastructure-as-code environments — these are the areas I'm deliberately building depth in next.
Open to security research collaborations & freelance engineering work
Let's strengthen your security posture — or build something new.
Whether it's detection engineering, a compromise assessment, or a full-stack build — I'm always glad to talk shop.