01 / SEROTONINPROTOTYPE
Questionnaires
Evidence
Risk
Serotonin
PrototypeA security questionnaire and vendor-assessment prototype, exploring AI-assisted answers, evidence workflows, and risk scoring. Live integrations are on the roadmap.
DETECTION ENGINEERING & SECURITY AUTOMATION[ UNITED STATES / 2026 ]
BLAYQEFORBES.
AKA / 0x5erotoninI turn complex threats into
clear signals. And action.
CLOUD SECURITY
SECURITY SOFTWARE
THE EXPERIENCE BEHIND THE WORK
Different industries. One security mindset.
CURRENTLY AT CREYOSExplore the journey
01 / THE MINDSET
Curiosity is the starting point.
Making things safer is the goal.
Built on curiosity.
Driven by defense.
I’m Blayqe, a security engineer with 7+ years across IT and cybersecurity. I work at the intersection of detection engineering, threat hunting, and automation—finding the signal, understanding the threat, and building a better response.
At Creyos, I build cloud security controls, device management, and automated detections. My experience spans financial services and healthcare, from enterprise incident response at Capital One to vulnerability management and GRC at Novant Health.
7+
Years across IT & security
FOUNDATIONS BUILT SINCE 2019100+
Weekly Splunk queries
THREAT INVESTIGATIONS / CAPITAL ONE1,000+
Vulnerabilities remediated
IN COLLABORATION WITH GRC / NOVANT02 / SELECTED WORK
Security, in practice.
LESS REPETITION. MORE CLARITY.
02 / FRAMETRAPPRODUCT SPECIFICATION
INGESTEXTRACTDETECT
FROM INDICATORS TO DETECTIONS.FrameTrap
In planningA detection-engineering product specification for a multi-SIEM smart editor. Plans cover IOC extraction, Sigma generation, field mapping, and MITRE tagging.
Earmark
Audio transcription, call review, and flag intelligence.
Port Scanner
A Python project for exploring network port scanning.
Linux Vulnerability Assessments
Technical writing and assessment materials.
Identifying Linux Vulnerabilities
An early repository for Linux security exploration.
ANALYST INSTINCT. ENGINEER MINDSET.0x5erotonin / BF
03 / THE JOURNEY
Real environments.
Real responsibility.
CURRENT ROLEFEB 2025 — PRESENT
Creyos
Security Engineer
Building security into the way a company operates.
- Implemented company-wide device management, from development through rollout.
- Authored cloud risk management policies and disaster recovery strategies.
- Built automations for cloud permission monitoring, privilege escalation, and denial-of-service detection.
FEB 2023 — FEB 2025
Capital One
SOC Analyst · Cyber Threat Analyst
Investigating threats across cloud, identity, endpoint, and network environments.
- Executed 100+ weekly Splunk queries; investigated phishing, malware, AWS CloudTrail activity, and identity threats across Okta, Entra ID, and Google Workspace.
- Developed security tools in PowerShell, Python, and C++; automated enrichment and response with XSOAR and CI/CD pipelines.
- Led complex incident response, investigated nation-state and APT activity, and delivered executive threat intelligence briefings.
- Performed security code reviews and PCAP analysis, and designed DFIR capture-the-flag exercises for the Blue Team.
MAR 2022 — FEB 2023
Novant Health
Risk Analyst · Governance, Risk & Compliance
Connecting technical risk with practical remediation.
- Supported 2,500+ incident tickets and remediated 1,000+ vulnerabilities with GRC teams.
- Assessed Windows and Linux environments with Tenable, prioritized critical remediation, and supported SOC 2 and HIPAA compliance.
- Processed 500+ monthly vendor access requests, enforced least privilege through Active Directory, and used KQL for security investigations and tabletop exercises.
THE FOUNDATION / IT OPERATIONS & SUPPORT
Zelis
Service Desk Analyst
Supported users across eight locations; introduced 100+ processes, procedures, and documentation for a new service desk. Recognized for “Best Customer Service.”
WellStar Atlanta Medical Center
Service Desk Analyst
Resolved desktop, laptop, mobile, hardware, and network issues; documented incidents and supported users across phone, chat, and email.
Yancey Power Systems
IT Help Desk Technician
Austell, Georgia
Fulton County Government
IT Field Technician Intern
Greater Atlanta Area
04 / THE TOOLKIT
Tools change.
The mindset compounds.
Across cloud, code, and operations.
Always learning. Always building.
[ 01 ]
Detection & response
- Splunk Enterprise Security
- Splunk ITSI
- Security Onion
- CrowdStrike
- SentinelOne
- Exabeam
- XSOAR
- Proofpoint
- Sysmon
- Netskope
[ 02 ]
Cloud & identity
- AWS · CloudTrail
- Azure · Entra ID
- Google Cloud
- Okta
- Google Workspace
- Active Directory
- Docker
- Kubernetes
- Linux
[ 03 ]
Build & automate
- Python
- PowerShell
- Bash
- C++
- Rust
- Git
- Terraform
- Jenkins
- Puppet
- KQL
[ 04 ]
Risk & resilience
- NIST
- HIPAA
- FISMA
- SOC 2
- Qualys
- Tenable
- Threat modeling
- Vulnerability management
- Disaster recovery
Education
Western Governors University
Bachelor’s degree
Cybersecurity & Information Assurance
West Georgia Technical College
Associate’s degree
Information Technology
Credentials & training
- Splunk Certified Cybersecurity Defense Analyst
- CCSKCertificate of Cloud Security Knowledge
- SEC504Hacker Tools, Techniques, and Incident Handling
- PCI Compliance
Still curious.
Even off the clock.
I’m exploring AI implementations for security services and writing about the things I build. Away from security, ask me about health and football.
Read my writing on MediumLET’S CONNECT
GOOD CONVERSATIONS BUILD GOOD THINGS.security.