// writing
Notes from the field
Security operations, awareness programs, and lessons learned the hands-on way. More coming — homelab builds, detection engineering, and automation write-ups.
June 2026 · 6 min read
What advising 25+ security teams taught me about incident response
The patterns that separate teams that recover in hours from teams that recover in weeks — none of which are about buying more tools.
Read post → May 2026 · 5 min readThe phishing program that actually changed behavior
How we cut phishing susceptibility 40% at a biotech — by treating it as a continuous program with a no-blame culture, not an annual checkbox.
Read post →