I am the Tech Lead for AI/ML in Google Security Operations. We provide AI capabilities that are targeted at security use cases. To do this, we use retrieval augmented generation, tools and extensions, customized prompting techniques, in-context learning, and other techniques to provide solutions that reduce toil and help improve analyst efficiency.
My initial role at Google focused on supporting the Detection and Response teams by providing systems and tools necessary for threat detection and investigation. This included responsibilities such as data processing, developing detection rule frameworks, enabling rule authoring, and collaborating with internal threat intelligence.
The second role was leading a team, which I started in 2018, that is now part of GCP's Security Command Center. Originally named Event Threat Detection, it was GCP's first managed threat detection offering. Its core capability is a highly scalable rule pipeline that processes many petabytes of logs daily, providing users with near real-time rule execution. As both threat detection and Security Command Center expanded, I became the overall technical lead for our threat detection services. In this role, I worked across GCP to understand environmental threats, identify detection opportunities, and build scalable detection systems.
