DETECTION ENGINEERING · SECURITY OPERATIONS

Johnathan
Dempsey.

Subject matter expert in detection-as-code, SIEM/SOAR, and AI-driven security operations. Started in systems and network engineering; now building detection programs across SaaS, finance, critical infrastructure, and nonprofits.

// currently: Detection Engineer @ cloud-native fintech · ~8M consumer accounts

# detection-as-code pipeline
title: Suspicious Remote Session
status: stable
author: j.dempsey
logsource:
  product: windows
  service: security
detection:
  selection:
    EventID: 4624
    LogonType: 10
  condition: selection and not allowlist
fidelity: 99.2% # last 90 days