Security Is a People Problem: How Sociology Reshapes Cybersecurity
The firewall between your organization and a breach isn't a piece of hardware — it's a web of trust, culture, and human behavior. Here's what the research actually says.
ReadHuman Centered Cyber
I'm a cybersecurity engineer working at the intersection of LLM-powered cyber deception and behavior-science security awareness. I build security programs in regulated industries — healthcare, banking, lottery — and I write and speak about the places where friends, trust, and adversaries meet.
Writing
Essays on security culture, deception ops, and behavioral influence.
The firewall between your organization and a breach isn't a piece of hardware — it's a web of trust, culture, and human behavior. Here's what the research actually says.
ReadA first note from the new site — why I rebuilt it, and what I plan to write about here.
ReadSpeaking
Recent and upcoming talks on AI-enhanced social engineering.
Talk
Large language models have changed both sides of the social-engineering table. Attackers use them to industrialize pretexting; defenders can use them to run cyber deception at a scale and fidelity that was impossible a few years ago. This talk walks through the current state of AI-enhanced social engineering, the design principles behind believable LLM-driven decoys, and how blue teams can turn the same tools loose on adversaries — drawing on research from Project Ossian and behavior-science-driven awareness programs.
Delivered at
Elsewhere
Looking for a speaker, a writer, or a second opinion on a security program?
Find me on LinkedIn · Read more →