I have been working the Information Security for just about ten years now, all on the Blue Team side of the house. I worked Digital Forensics for the US Government, in multiple SOCs and different aspects of Blue Teaming in general. I don’t know if I am right, or wrong, but generally speaking, I think we are heading the right direction. This blog is a way for me to open up and pontificate on some of the thoughts specifically about blue teaming, but also some more general thoughts on the Information Security profession, and topics at-large.
I currently run a Security Operations team, tasked with running Detection and Monitoring, Incident Response, Vulnerability Management, and a smattering of other things. Throughout my career, I have seen the good, the bad, and the ugly. I have tried to guide and advise my organization in the best ways I have seen fit, but more often than not I was not senior enough to really gain any traction. That has changed with this new role and I look forward to throwing out some ideas into the ether and see how they work, open discussions, and letting everyone know what my team and I have found.
I work with a truly passionate team that cares about what they do, not only for our organization but also for the larger community. We want to improve the landscape as much as we can, and make us better! While I am not a coder by nature and a newb at best, I hope to change that and provide what I have found useful/deployed with my team.
I hope to engage folks and have people open up about their experiences and thoughts on any and all topics. I try not to be egotistical and like to open debate the different aspects the subject, so please comment, or engage with me on social media.
