Collins M.

I am a cybersecurity engineer who also writes vendor-grade technical documentation. Ten years running security operations, plus two years as staff technical writer at NXLog, a log collection and SIEM integration vendor. Most security writers cannot configure a SIEM. Most security engineers cannot write. On the engineering side, I have deployed and tuned SIEM, XDR, DLP and WAF across telecom, finance and public sector clients, optimised 100+ detection rules to cut false positives by 45%, led incident response on 30+ critical threats bringing impact time from 12 hours to under 2, run 35+ vulnerability assessments and penetration tests, and led a managed security services programme across three business units for a major telecom operator. I have also run 50+ device security assessments and hardened 200+ endpoints for at-risk organisations. On the documentation side, I authored 60+ technical documents at NXLog covering product integrations and log collection, adopted by 100+ enterprise clients, maintained docs across five major releases in MkDocs and GitLab, and configured integrations with Splunk, ELK Stack and IBM QRadar. My published work covers Windows Event Log collection, security logging beyond Event ID 4625, log delivery reliability over TCP, and meeting compliance mandates. Samples are in my portfolio below. How I can help: • SIEM deployment, migration, detection engineering and rule tuning • Log collection and telemetry pipeline design • Incident response, threat detection and SOC operations • Vulnerability assessment, penetration testing and remediation guidance • Endpoint hardening, device security and secure configuration management • SIEM, logging and security operations documentation • Product documentation, integration guides and troubleshooting guides • Incident response plans, SOC playbooks and security runbooks • Security policies, compliance reports and audit documentation • Cybersecurity articles, white papers and technical explainers • Security awareness and training materials Tools: Splunk, IBM QRadar, ELK Stack, Wazuh, Microsoft Sentinel, Chronicle, ArcSight, NXLog, Datadog, Prometheus, Zeek, Snort, Suricata, OSSEC, OpenVAS, Tenable Security Center, ModSecurity, WPScan, MobSF, MVT, GitLab, MkDocs, Linux, RHEL, Ubuntu, Windows Server, AWS, Azure, GCP. Frameworks: ISO 27001, PCI-DSS, GDPR, NIST, SOC 2, CIS Controls, OWASP Top 10, MITRE ATT&CK. Certifications: IBM Certified Associate Administrator, Security QRadar SIEM. CompTIA Security+. ISC2 Certified in Cybersecurity. LPIC-1 Certified Linux Administrator. arcX Foundation Level Threat Intelligence Analyst. If you need someone who can understand the technical detail, ask your engineers the right questions, and produce something clear at the end of it, I can help.