Security operations
Connecting endpoint, network, cloud, and identity telemetry to make sense of suspicious activity.
About baz
My experience spans security operations, incident response, threat hunting, detection engineering, threat intelligence, and vulnerability management.
TopSec is where I post security notes and write-ups.
Experience
Incident response
Investigating scope and root cause, supporting containment, and turning findings into clear remediation steps.
Detection & threat hunting
Developing and tuning detection logic, reducing noise, and asking useful questions of the available evidence.
Threat intelligence
Putting adversary behavior and emerging threats into context for investigations and defensive decisions.
Vulnerability management
Assessing weaknesses, understanding exposure, and helping prioritize practical fixes.
Security automation
Working with SIEM, EDR, and SOAR tooling to support repeatable investigations and response workflows.