Engineering solutions for operational security problems
Architected an MCP-based intelligence layer over internal SIEM detections, enriched with public detection libraries, to automate MITRE coverage tracking, identify gaps, and generate production-ready detection logic — integrating directly into our detection-as-code workflow.
ML-based scoring engine identifying bot-driven account registrations via structural pattern analysis. 92% accuracy, deployed for real-time fraud reduction.
Falco-based runtime detection stack converting syscall alerts into enriched, investigation-ready insights through AI-assisted analysis.
Built a fully automated CI/CD pipeline for SIEM applications delivery. Eliminated manual packaging and testing , reduced deployment time from hours to minutes.