Working detection & SIEM engineer at a live SOC — the person who writes the rules that catch attacks and triages the alerts when they fire. I opened this page for anyone breaking into SOC/detection work, or who wants expert eyes on their next step: SOC career and resume reviews, "what do I actually study?" roadmaps, mock-interview prep, and help writing detection rules that fire on the behavior, not the noise. Everything's answered in writing, on my own time — no call to schedule. Send me a Priority DM.