Security Architect | AI/ML Security Specialist | DFIR Expert Creator of AI for the Win - Teaching security practitioners to build AI-powered tools
13+ years architecting security solutions, responding to major incidents, and building detection capabilities. Experienced across endpoint, cloud, and enterprise security platforms at scale.
Specializing in AI-powered security automation, designing solutions that integrate LLMs, machine learning, and data science to accelerate threat detection, incident response, and threat hunting.
50+ hands-on labs teaching security practitioners to build AI/ML tools for threat detection, DFIR, and incident response. From ML basics to production-ready detection systems.
What's included:
- Docker environment with all dependencies
- Google Colab notebooks for cloud execution
- 18 CTF challenges for skill validation
- Production-ready code examples
Free for personal learning | Commercial licensing available for corporate training and bootcamps.
Companion n8n workflow suite for the SANS Ransomware Intelligence Webinar. Polls ransomware.live every 6 hours, runs AI threat analysis, and delivers rich interactive reports — automatically.
Three-tier workflow progression:
| Level | What it does | LLM Options |
|---|---|---|
| 101 | Monitor + AI analysis + HTML/Slack report | Claude or Ollama (local) |
| 200 | + IOC enrichment, YARA rules, historical trending, multi-channel | Claude or Ollama (local) |
| 300 | + Multi-signal attribution, SIEM integration, IR playbooks, threat sharing | Claude Opus — Webinar attendees |
101 outputs a full dark-themed intelligence brief — 8 KPI cards, MITRE ATT&CK mapping, attack lifecycle visualization, Chart.js charts, and group profiles. Runs 100% locally with Ollama or in the cloud with Claude.
AI/ML 
Security Platforms 
Adversary Emulation 
- Multi-agent systems for automated incident response
- LLM-powered threat hunting and detection engineering
- Building open-source security tooling
- Teaching practitioners to integrate AI into security operations
"ML scales detection, LLMs accelerate analysis, humans drive decisions."