About

Placeholder content. Everything on this page is a scaffold — edit content/pages/about.md and replace the bracketed items with your own history. Nothing here is factual until you make it so.

I'm a cyber security practitioner based in the United Kingdom, working in [detection and response / security operations / your specialism]. This site is where I keep my writing, my notes and the resources I find myself sending to people more than once.

What I work on

• Detection and response — designing, tuning and validating detections so that alerts mean something by the time they reach an analyst.
• Incident handling — leading or supporting investigations from first alert through to the post-incident report.
• Threat hunting — proactive searches across endpoint and network telemetry for behaviour that never triggered an alert.
• Security engineering — the plumbing: log pipelines, coverage gaps, automation and the tooling that makes the above repeatable.

Experience

[Job title] — [Organisation] [Month Year] – present

[One or two sentences on scope and impact. Numbers help: size of estate, volume of alerts triaged, reduction in false positives, time-to-detect improvements.]

[Job title] — [Organisation] [Month Year] – [Month Year]

[What you were responsible for and one thing you changed for the better.]

Certifications and training

Tooling I use regularly

Cortex XDR · Splunk · Microsoft Sentinel · Suricata · Zeek · Velociraptor · Python · Sigma · MITRE ATT&CK

(Trim this to the tools you actually use — a short honest list reads far better than a long aspirational one.)

Beyond the day job

[Home lab, CTFs, community involvement, mentoring, speaking, or whatever you want people to know. This is the part that makes the page feel like a person rather than a CV.]

Get in touch

The quickest route is email. I'm happy to hear from people early in their security careers as well as from organisations looking for help.