Garet P.

Who I am

Security analyst, builder, and student. The longer version.

Background

I work in security operations: monitoring environments, triaging alerts, and responding to incidents. My day-to-day focus is on moving from signal to context to decision accurately and quickly, using Microsoft Sentinel, Splunk, and CrowdStrike Falcon as primary tools. I am comfortable in both Windows and Linux environments and have a strong foundation in network security and scripting that lets me go beyond the alert queue when a situation calls for it.

A working understanding of GRC and compliance frameworks (SOC 2, NIST CSF, GDPR) changes how I assess severity and communicate findings. I understand why certain controls exist, which helps me prioritise correctly, escalate with context, and explain security events in terms that resonate with both technical and non-technical stakeholders.

Outside of operational work I build security tooling and maintain Civic Nexus, an independent research platform designed as a live application of privacy-by-design principles.

Certifications

  • CCNA

    Cisco · 2026

  • Security+

    CompTIA · 2026

  • AZ-500

    Microsoft · 2026

Skills and tooling

  • Microsoft Sentinel
  • Splunk
  • CrowdStrike Falcon
  • Elastic / Kibana
  • SIEM / Log Analysis
  • Alert Triage
  • Incident Response
  • Detection Engineering
  • Vulnerability Management
  • MITRE ATT&CK
  • Network Security
  • Wireshark
  • Nmap
  • Python
  • Bash
  • Linux / BSD
  • Windows Server
  • NIST CSF
  • SOC 2
  • GDPR

Experience and training

  1. Current

    A.A.S. Cybersecurity & Information Assurance (in progress)

    Associate of Applied Science in Cybersecurity and Information Assurance. Coursework covering network security, operating systems, threat analysis, and security policy, running in parallel with hands-on lab work and independent research.

  2. 2024–2025

    Azure Security Engineering · Microsoft

    Hands-on training in Azure security: identity and access management, Microsoft Sentinel configuration and KQL querying, network security groups, Defender for Cloud, and security operations workflows in a cloud-native environment.

  3. 2024–2025

    Google Data Analytics · Coursera

    Data aggregation, visualisation, and SQL, applied to log analysis, alert data processing, and building structured reporting outputs from security event data.

  4. Ongoing

    Independent Security Research & Writing

    Regular deep-dive analysis on detection engineering, incident response, GRC structural gaps, and regulatory disclosure requirements.