LIVE · SLOUGH, UK·--:--:--·AVAILABLE FOR CONSULTING
Hello, I'm Kehinde.
I automate the SOC.
Automation Engineer & Security Consultant at Crowdnow. I combine four years of hands-on security analysis, threat hunting and detection engineering with security automation: Logic App playbooks, ServiceNow integrations and connectors, Azure AI Foundry workflows and Copilot Studio agents. Investigate the threat. Engineer the detection. Automate the response.
The console is my portfolio, built like a SIEM. Every incident in the queue is a project. No prior clearance required.
CHAPTER 01 — MISSION
I spent four years inside a SOC queue. Now I build the automation that empties it — and advise the teams who run it.
Every alert tells a story.Step into the console
before the incident.
OFF SHIFT · STILL WRITING PLAYBOOKS
CHAPTER 02 — PRACTICE
Three disciplines. One operator.
Automation that a SOC will actually trust has to be built by someone who has lived with the alerts. These are the three areas I work across.
CHAPTER 03 — JOURNEY
From the queue to the playbook.
Scroll to move through the years
CHAPTER 04 — CASE FILES
Three incidents worth investigating first.
CHAPTER 05 — SHIFT BRIEFING
You're on shift. Here's how the console works.
The rest of this site is laid out like the SIEM and XDR consoles I work in every day. You don't need to be an analyst to use it — three things to know and you're cleared.
› Start the shift- 01
The incident queue is my project list.
Each incident is a real automation or investigation. Select one to investigate and read the full case study, evidence and code.
- 02
Advanced hunting is my skills page.
Run ready-made KQL-style queries against my skills, incidents and articles — or write your own.
- 03
Entities, playbooks, intel and escalation.
Entities is my profile and CV. Playbooks visualise my Logic Apps. Threat intel is the blog. Escalate is how you contact me. A quick brief for recruiters is always one click away.
CHAPTER 06 — ESCALATE
Let's talk automation.
Hiring for a SOC automation, SOAR or Microsoft security integration role, or need a consultant to design the playbooks? Escalate directly.