Work / Engineering evidence

Systems explained by outcomes, constraints and architecture.

Each report shows the decision path behind delivered programs, active work, research labs and open-source systems. Generalized client context stays explicit; evidence comes before stack labels.

Security Analytics

01 systems
delivered / Security Analytics / 2019 -> 2022

Security Ops: User Behavior Analytics & Anomaly Detection

Behavioral baselines and explainable anomaly signals for SOC triage and investigation.

Constraint Data volume is high; latency and cost constraints matter.

Select a signal node to inspect its operating principle.

  1. TelemetryNormalize multi-source logs.
  2. BaselinesModel user, session, and device behavior.
  3. SignalsScore anomalies with controllable thresholds.
  4. SOC triageKeep every alert explainable.
Data pipeline, feature engineering, anomaly detection, and methodology documentationPySpark / Python / Unsupervised learning