How I Would Lead a Security Engineering Team: Outcomes, Evidence, and Trust
A principal-level operating model for leading security analysts and developers through clear outcomes, decision rights, engineering leverage, and measurable learning.
Nathan Berg
Defining the Security Outcome for Detection Engineering
A practical security engineering field guide to detection engineering, covering risk, implementation, evidence, and team leadership.
Defining the Security Outcome for Software Supply Chain Security
A practical security engineering field guide to software supply chain security, covering risk, implementation, evidence, and team leadership.
A Practical Risk Model for Authorization
A practical security engineering field guide to authorization, covering risk, implementation, evidence, and team leadership.
Scaling Security Through Paved Roads, Guardrails, and Team Growth
A practical security engineering field guide to principal-level security engineering, covering risk, implementation, evidence, and team leadership.
From One-Off Reviews to Reusable Security Architecture
A practical security engineering field guide to principal-level security engineering, covering risk, implementation, evidence, and team leadership.
How I Approach Principal-Level Security Engineering
A practical security engineering field guide to principal-level security engineering, covering risk, implementation, evidence, and team leadership.
How I Facilitate a Cybersecurity Tabletop Exercise
A practical security engineering field guide to cybersecurity tabletop exercises, covering risk, implementation, evidence, and team leadership.
Measuring Whether a Tabletop Exercise Improved Readiness
A practical security engineering field guide to cybersecurity tabletop exercises, covering risk, implementation, evidence, and team leadership.
Turning Tabletop Findings into Owned Engineering Work
A practical security engineering field guide to cybersecurity tabletop exercises, covering risk, implementation, evidence, and team leadership.