Skills
The tools, frameworks and languages I use day to day across security operations, compliance, cloud and identity.
Security operations
- Incident response
- Threat detection
- SIEM analysis
- EDR investigation
- Alert triage
- IOC/IOA analysis
- SOAR automation
- Threat hunting
- MITRE ATT&CK
Compliance and frameworks
- SOC 2 Type II
- ISO 27001
- ISO 42001
- OWASP LLM Top 10
- Third-party risk management
Security tools
- CrowdStrike Falcon
- Rapid7
- Mimecast
- Proofpoint
- ZScaler
- Okta
- BlackKite
- KnowBe4
- Microsoft Defender
- Fusion SOAR
- n8n
Networking and cloud
- AWS (Identity Center, IAM, Secrets Manager, KMS, S3/Glacier)
- Azure / Entra ID
- Google Workspace
- Terraform
- Docker
- FortiGate
- Cisco Meraki
Query and automation
- KQL (Defender)
- CQL (CrowdStrike)
- Python
- PowerShell
- Bash
- Ansible
- Terraform IaC
Identity and access
- Okta SAML/SCIM/SSO
- AWS Identity Center
- Azure AD / Entra ID
- Active Directory
- Conditional Access
- MFA
- Zero Trust