Blog
9 posts, newest first
-
GRC Is Not Boring
I spent two internships convinced GRC was the 'boring' side of security. Then I went to work on it full time at Paramify and found the opposite: real tools, real problems, and a field being rebuilt around AI. This is the start of a series on why.
-
Building a Real-Time Chat App: Lessons from Cloud Architecture
From AWS acronyms to a working serverless chat application, and what I learned about state, IAM, and modern development tools.
-
The Art of Triage
When every alert looks urgent, how do you decide what's truly dangerous? A look at the most critical skill for a SOC analyst: triage.
-
The Digital Detective: A Day in the Life of a SOC Analyst
From the initial alert to the final verdict, a look at the investigative process of a SOC analyst hunting for threats in a sea of data.
-
From Auditing Firewalls to Defending Them
The journey from a GRC auditor to a SOC analyst, and how seeing security from both sides provides a unique and powerful perspective.
-
The Human Element: I Phished My Own Company (For Science!)
How I used OSINT, AI, and a little social engineering to build a realistic spearphishing campaign to test the human firewall at my own company.
-
From Pipelines to Policies: Auditing Modern Application Development
My deep dive into auditing a modern CI/CD pipeline, connecting high-level security policies to the technical reality of developer workflows and tools like Snyk and SonarQube.
-
What I Learned Auditing a Corporate Merger
A cybersecurity intern's perspective on the complex process of securely integrating two companies' digital infrastructure during a major corporate merger.
-
The Two Sides of the Cybersecurity Coin
A cybersecurity student shares insights from experiencing both Governance, Risk & Compliance (GRC) and Security Operations roles through two different internships.