Professional services
Less friction.
Stronger operations.
Automate repetitive work, improve everyday IT, and strengthen security. I bring healthcare IT support, detection engineering, and SOC experience to solutions shaped around your people and environment.
Automation across every service
Make the workflow better.
Then make it repeatable.
Whether the work starts with a support issue, a security alert, or a manual business process, I look for ways to reduce repeated effort and improve handoffs. Scripting, integrations, and AI support the workflow where they add value.
We agree on what should be automated, where human review belongs, and how to handle failures. Validation and documentation are part of the delivery.
01 / Practical technology consulting
Automation & workflow improvement
For teams spending too much time moving information, repeating tasks, or chasing handoffs.
Connect systems, simplify handoffs, and automate repeatable work. Add AI where it makes information easier to use and decisions easier to support.
Discuss a workflowHow I can help
- Map a recurring workflow and identify bottlenecks, duplicate effort, and opportunities for automation.
- Build scripts and integrations for enrichment, task routing, reporting, and information exchange.
- Apply AI-assisted retrieval and summarization with data privacy, accuracy checks, and human review built in.
What we work toward
An agreed workflow, a scoped automation or integration, validation of normal and failure paths, and operating documentation.
The experience I bring
My background includes Python, PowerShell, and Bash scripting, contributions to SOAR playbooks alongside automation engineers, and independent work with local AI enrichment.
See my AI enrichment project02 / Practical technology consulting
IT support & secure foundations
For people and teams dealing with endpoint issues, connectivity problems, or recurring technical interruptions.
Resolve the immediate problem, understand what keeps causing it, and strengthen the systems your people rely on.
Discuss IT supportHow I can help
- Troubleshoot endpoint and network connectivity issues.
- Review endpoint configuration and hardening opportunities.
- Identify recurring problems and opportunities for repeatable support processes and automation.
What we work toward
A documented diagnosis, agreed configuration or support improvements, and clear next steps for recurring issues.
The experience I bring
Healthcare IT support at High Wire Networks gave me hands-on experience with users, endpoint configuration and hardening, and connectivity troubleshooting.
See my IT support background03 / Attacker-informed perspective
Security gaps & architecture
For teams that need a clearer view of vulnerabilities, control gaps, and where to prioritize security improvements.
Use an attacker’s perspective to examine how weaknesses could connect, where controls may fall short, and what architectural changes would strengthen defenses.
Discuss a security reviewHow I can help
- Review vulnerability awareness and detection: how relevant weaknesses are identified, understood, and surfaced by existing processes and telemetry.
- Analyze security gaps across endpoint configurations, access paths, available telemetry, and defensive controls.
- Develop architectural recommendations informed by potential attack paths and practical operating constraints.
What we work toward
A prioritized gap analysis with supporting evidence, visibility limitations, and architectural recommendations your team can act on.
The experience I bring
My approach draws on endpoint hardening, investigation escalations, detection engineering, and MITRE ATT&CK mapping to connect possible attack behavior with the defenses in place.
See my security investigation experience04 / Blue-team perspective
Detection & security operations
For security teams working through noisy alerts, incomplete investigation context, or repetitive triage.
Improve detection quality, connect the evidence analysts need, and automate routine investigation steps while keeping judgment with the analyst.
Discuss security operationsHow I can help
- Review SIEM and EDR signals, correlation logic, detection coverage, and telemetry gaps.
- Tune recurring noise and improve enrichment and investigation context.
- Improve triage, escalation, and response handoffs through repeatable workflows and scoped automation.
What we work toward
Agreed detection or workflow improvements, validation against relevant examples, and analyst-facing documentation.
The experience I bring
As a Lead SOC Analyst / Detection Engineer in a multi-tenant MSSP, I tuned detections, handled complex escalations, mentored analysts, and partnered with automation engineers.
See my detection tuning workTwo perspectives. One stronger defense.
Think like an attacker.
Improve the defender’s view.
The cardinal represents an attacker-informed security assessment approach: vulnerability awareness and detection, security gap analysis, and architectural recommendations from an attacker’s perspective. The blue jay represents detection engineering and security operations: making those risks visible and actionable. Together, they connect what could go wrong with how your team can identify and respond to it. These are authorized, defensive reviews and recommendations—not penetration tests.
How I scope and validate the work ↗A focused engagement
Start with one useful improvement.
Bring a recurring task, an IT problem, a security concern, or a workflow that needs attention. We’ll define the outcome, agree on the scope, and identify the evidence needed to validate the result.
Talk through your priorities ↗Start a conversation