Detection engineer, cloud security researcher, and programmer.

I'm Ian Cooper, a Detection Engineer at Expel, where I build detections, automate SOC alert triage, and investigate threats across cloud environments.

I'm interested in the automation and tooling that makes security teams more effective. Read what I've been building and thinking about below, or on Expel's blog.