About Me
Defender first.
Learning to attack next.
I started on the defensive side — SOC triage, identity and access management, privileged access monitoring, GRC. Four-plus years of real alerts, real breaches, and real infrastructure at enterprise scale. Detection engineering, malware analysis, IAM/PAM, compliance programs — I've worked across all of it.
Now I'm learning the other half. Working through CTFs, studying attack techniques, and mapping offensive thinking back to the defensive controls I've been building. Understanding how attackers operate makes you a sharper defender.
I write everything down — tool teardowns, quick TILs, CTF walkthroughs. All public, all searchable. A knowledge base I actually maintain, not a highlight reel.
Let's Connect →