Detection, Response &
Agentic Security.
I engineer threat detection and response, and I'm now building AI agents that triage alerts, respond to incidents and hunt threats. Designed to be measured, observable and safe to trust.
Current role
Ripple
Staff Security Engineer
- Now building
- Agentic security operations
- Location
- Greater London, UK
root@ackroyd:~# cat bio.txt
Staff Security Engineer at Ripple specialising in Detection & Response. I'm building agentic systems for security operations: AI agents that triage alerts, drive incident response and hunt threats, built on deliberate context engineering, scoped skills, retrieval, and rigorous evaluation and observability of agent behaviour. Before that, years of detection engineering, incident response and threat hunting at PwC in the UK and Australia. GIAC (GCSA) and AWS Security Specialty certified, with deep technical proficiency in AWS, Azure and GCP. Delivered presentations at AISA Canberra and the UK Cyber Security Council.
root@ackroyd:~#
$ ./agentic_soc --status
Triage
Enrich, classify and disposition alerts, with a written rationale an analyst can audit.
Respond
Build the incident timeline, scope the blast radius and propose containment for approval.
Hunt
Turn a hypothesis or fresh intel into queries, run them, and surface what deserves a human look.
01Experience
Experience
2024 – Present
Ripple
Staff Security Engineer
- Designing and building agentic systems that triage alerts, support incident response and run threat hunts.
- Context engineering, scoped agent skills and tools.
- Evaluation and observability of agent behaviour.
- Leading our Detection Engineering efforts.
- Incident Response, Threat Intelligence Operationalisation and Threat Hunting.
2022 – 2024
PwC Australia
Manager, Detection Engineering
- Detection Engineering; detection-as-code pipelines, detection validation and automated detection rule management.
- Detection & Response and Threat Intelligence consultation for clients in finance, government, and retail sectors on a strategic and tactical level.
2018 – 2022
PwC UK
Senior Consultant
- Threat hunting and compromise assessments for clients in finance, retail, and utilities sectors.
- Purple teaming and detection engineering consultation for clients in financial services.
02Credentials
Certifications
AWS Security
AWS Security Specialty
GCSA
GIAC Cloud Security Automation
GCFA
GIAC Certified Forensic Analyst
Google SecOps
Security Practices with Google SecOps SIEM
Tines Advanced
SOAR Automation Platform
CISMP
Certificate in Information Security Management Principles
03Content
Articles, Presentations and Projects
04Contact