Work
What I have built
The work I am proudest of, one page each: what the problem was, what I did, and what changed. Day-job work is described at the level of my public CV, with no customer or confidential detail.
In my own time
At work
Schneider Electric · 2022 to date
Building a 24×7 OT security operations practice
From a single customer to nine enterprise contracts, and from a team of eight to thirty, delivering around the clock from India, Europe and the US.
Read the case study →
Schneider Electric · 2022 to date
Detection engineering for OT
More than 230 custom detections for industrial networks, and the practice of keeping them alive as the plants change.
Read the case study →
HSBC · 2019 to 2020
Phishing triage from 45 minutes to under 8
SOAR playbooks for the most repetitive work in a global bank's SOC, use-case engineering against ATT&CK, and a legacy OT machine caught beaconing.
Read the case study →
Community
- Practitioner comments on CREST's draft OT/ICS supplement to its SOC accreditation standard, 2026.
- Talks and panels on OT security and AI: c0c0n 2026, the Observer Research Foundation, and the Cyber AI Risk Summit in January 2027. All talks.