Hi, I'm Rhys.
Cyber Security Engineer · Aston Martin F1 Team
I'm a Cyber Security Engineer at Aston Martin F1 Team with a long-standing passion for computing. Outside of my professional role, I enjoy creating software projects, experimenting with new ideas, and continuously expanding my skill set.
What I work on
Detection engineering
Building custom detection rules and dashboards across first- and third-party log sources.
Incident response
Investigating escalated alerts and designing response procedures that cut time to remediation.
Security observability
Bringing new log sources into the SIEM and closing visibility gaps, including across identity.
Security automation
Automating SOC workflows to streamline processes and speed up incident response.
Endpoint security
Deploying, configuring and maintaining endpoint detection and response across the organisation.
Offensive testing
Penetration testing internal and external-facing platforms to validate controls and find weaknesses.
Experience
Aston Martin F1 Team
Silverstone, UK
Jul 2026 – now
Cyber Security Engineer
Strengthening detection and response through EDR management, automation and expanded security observability, closing visibility gaps and streamlining SOC processes.
- Deployed new logging to support identity and access management, closing visibility gaps across critical identity infrastructure
- Built automation flows that streamline SOC processes and reduce incident response times
- Managed the deployment, configuration and maintenance of EDR tooling across the organisation
- Configured infrastructure and SaaS platforms to ingest security events from third-party log sources
Jun 2025 – Jun 2026
Cyber Security Analyst
Strengthened the organisation's security posture through offensive testing, detection engineering and incident response.
- Performed penetration tests across internal and external-facing platforms to validate controls and uncover vulnerabilities
- Built and deployed custom detection rules and dashboards across first- and third-party log sources
- Architected incident response procedures, reducing time-to-response and time-to-remediation
- Investigated and remediated security alerts escalated by a third-party SOC
Jun 2023 – Aug 2024
Cyber Security Analyst – Industrial Placement
Worked on the organisation-wide cyber security strategy and roadmap alongside day-to-day incident response, and improved endpoint protection with AMF1's official cybersecurity AI partner, SentinelOne.
Education
BSc Computer Systems (Cyber Security)
Nottingham Trent University
2021 – 2025 · First-Class Honours
BTEC Level 3 National Extended Diploma, Computing
Derby College
2019 – 2021
Certifications & awards
Award
SentinelOne EDR ThreatOps Challenge
First Place · SentinelOne
SentinelOne
SentinelOne Security Administrator
SentinelOne Incident Responder
Microsoft
SC-200
Security Operations Analyst Associate
SC-900
Security, Compliance and Identity Fundamentals