The Defender’s Guide
to AI Agents
What to log, detect, investigate and contain when AI agents act on real systems.
Download free PDFPDF · 84 pages · Free · No email or signup
Read the guide online →
OPERATIONS · ENGINEERING · SECURITY PRODUCTS
Cybersecurity leadership.
Built on technical depth.
I bring SOC leadership, detection engineering and security-product experience to enterprise cyber defense and AI-enabled security operations.
in cybersecurity Nearly 15 years at Microsoft OPERATIONS SOC
leadership Microsoft and a global MSSP ENGINEERING Detection Engineering
Leadership Microsoft
SELECTED WORK
Practical work. Publicly available.
New · Free vendor-evaluation guide
Buying an AI SOC?
Ask These 70 Questions First
Assess the evidence, permissions, failure handling, detection quality, cost and exit before you buy.
Explore the guide37-page guide + editable Excel worksheet · No email or signup required
The Defender’s Guide
Cyber P&L
Open-source research for examining cyber loss, control assumptions and security investment decisions.
Explore the model →Microsoft CDOC strategy brief
A contribution to Microsoft’s published approach to cyber defense operations.
Read the Microsoft strategy brief →AREAS OF EXPERIENCE
From investigation to engineering and leadership.
Security operations & response
SOC leadership, threat intelligence, complex investigations and response readiness.
Detection & security engineering
Detection authoring, validation, tuning and delivery across SIEM and XDR environments.
AI security & governance
Agent identity, operational evidence, AI management systems and assurance.
Experience across 8 SIEM and 2 XDR platforms, connecting technical direction with operational ownership, escalation and analyst development.
Let’s connect.
Professional conversations, research, speaking and media.
Contact Jessen →