I build the operational backbone of the modern SOC.

1. 01

   Pulling malware apart

   I started out researching malware: taking suspicious files apart, deciding what was malicious and writing the signatures that stopped it.

2. 02

   SOC, hunting & response

   Then I moved into the SOC: monitoring, threat hunting and incident response, automating the repetitive parts as I went.

3. 03

   Automation at scale

   Automation became my craft. I led SOAR programmes, designed playbook frameworks and built the teams and training that made them stick.

4. 04

   The unified SOCNow

   My work now spans the whole SOC platform, from SIEM, XDR and cloud detection to automation, exposure management and threat intelligence, plus securing AI agents.

Want the details? Ask Celeste about my career.