Hi, I'm Rhys.

1. 01

   Detection engineering

   Building custom detection rules and dashboards across first- and third-party log sources.

2. 02

   Incident response

   Investigating escalated alerts and designing response procedures that cut time to remediation.

3. 03

   Security observability

   Bringing new log sources into the SIEM and closing visibility gaps, including across identity.

4. 04

   Security automation

   Automating SOC workflows to streamline processes and speed up incident response.

5. 05

   Endpoint security

   Deploying, configuring and maintaining endpoint detection and response across the organisation.

6. 06

   Offensive testing

   Penetration testing internal and external-facing platforms to validate controls and find weaknesses.

Experience

1. Jul 2026 – nowSilverstone, UK

   Cyber Security Engineer

   Aston Martin F1 Team

   Strengthening detection and response through EDR management, automation and expanded security observability, closing visibility gaps and streamlining SOC processes.

   • Deployed new logging to support identity and access management, closing visibility gaps across critical identity infrastructure
   • Built automation flows that streamline SOC processes and reduce incident response times
   • Managed the deployment, configuration and maintenance of EDR tooling across the organisation
   • Configured infrastructure and SaaS platforms to ingest security events from third-party log sources
2. Jun 2025 – Jun 2026Silverstone, UK

   Cyber Security Analyst

   Aston Martin F1 Team

   Strengthened the organisation's security posture through offensive testing, detection engineering and incident response.

   • Performed penetration tests across internal and external-facing platforms to validate controls and uncover vulnerabilities
   • Built and deployed custom detection rules and dashboards across first- and third-party log sources
   • Architected incident response procedures, reducing time-to-response and time-to-remediation
   • Investigated and remediated security alerts escalated by a third-party SOC
3. Jun 2023 – Aug 2024Silverstone, UK

   Cyber Security Analyst – Industrial Placement

   Aston Martin F1 Team

   Worked on the organisation-wide cyber security strategy and roadmap alongside day-to-day incident response, and improved endpoint protection with AMF1's official cybersecurity AI partner, SentinelOne.