Writing

Blog

Notes on SOC operations, IT leadership, and lessons learned building security teams from the ground up.

Coming soon

Vendor evaluation checklist for security tooling

What I actually look for when picking security vendors and tools for a growing team.

Coming soon

Translating security risk for non-technical stakeholders

How to brief executives on incidents and risk without losing the room, or the point.

Coming soon

Building a SOC from zero: what I'd do differently

Notes on standing up a Security Operations Center: tooling, staffing, and the first 90 days.