I got my start in the U.S. Army, first as a Cavalry Scout and later as a Communications Sergeant, building and administering networks for unit operations. That’s where I learned to work on systems where the failure modes are real, and it’s still how I approach security.
Since then I’ve worked the defensive side of large cloud environments: incident response, detection engineering, and the automation that keeps analysts from doing the same thing by hand a hundred times over. I hold six active GIAC certifications spanning cloud security, threat detection, and forensics (GCFR, GCTD, GPCS, GCLD, GSEC), and I sit on the GIAC Advisory Board.
This blog covers four things: cloud security, incident response, AI, and anything else I find interesting. Every post is a writeup of something I actually built or actually broke. When a problem cost me three hours, those three hours go in the post, because that’s the part nobody writes down.