Detection-focused security engineer · 5+ yrs building enterprise detection pipelines,
leading incident response, and deploying honeypots that actually catch threats.

   

---

whoami

role     : Senior Security Engineer (Cyber Defense)
exp      : 5+ years
focus    :
  - Detection Engineering & SIEM tuning
  - Threat Intelligence (Tines automation · API integrations)
  - Incident Response — MTTR < 60 min across 1000+ alerts/month
  - Honeypot & deception infrastructure
  - Agentic AI for detection engineering (LLM-assisted rule authoring)
homelab  : 5+ systems · 90+ microservices · CIS hardened · self-hosted everything

---

Tech Arsenal

Detection & SIEM

Endpoint · Network · Identity

Cloud & Infrastructure

Scripting & Automation

Frameworks & Compliance

---

Featured Projects

	Project	Description
🍯	honeypots	Containerized deception infrastructure suite
🕷️	spidertrap	Python-based bot detection & fingerprinting
🪵	log4pot	Log4Shell (CVE-2021-44228) honeypot
🌐	wordpot-docker	WordPress honeypot container
🥧	SkyPi	Raspberry Pi self-hosting infrastructure
⚙️	.dotfiles	CIS-hardened system configs

---

Contribution Snake

---

📈 GitHub Stats

---

_{Detection engineering · Threat intelligence · Incident response · Deception tech}