About

A small team obsessed with analyst craft

We sit with SOC managers weekly, not just at kickoff. That rhythm keeps scenarios tied to triage debt, hunt closures, and bridge comms instead of cinematic breach theater.

Org chart

Program Director

Evelyn Park

Readiness reviews, enterprise scope

Lead SOC Instructor

Hana Sorell

Simulation Engineer

Noah Ibarra

Curriculum Strategist

Jonah Malik

Customer Success Manager

Mira Cho

EP

Evelyn Park

Program Director

HS

Hana Sorell

Lead SOC Instructor

NI

Noah Ibarra

Simulation Engineer

JM

Jonah Malik

Curriculum Strategist

MC

Mira Cho

Customer Success Manager

Signals from cohorts

Origin Watchtower made me rewrite vague dispositions until they sounded like something a lead could paste into a ticket without cleanup.
Jiwon · Busan
Stream Hound week two asked me to kill my own hypothesis in front of peers—awkward, then clarifying.
Alex · Hunt lead · Regional MSSP
Bluebox Runbooks forced our scribe role to capture decisions while the IC spoke. That small format change carried straight into a live phishing rehearsal.
Taylor Ng · Incident coordinator · Industrial controls vendor
SIEM Splice threads felt like the messy reality of pivoting without a narrator—exactly what our newer analysts needed.
Rami · SOC manager · University SOC
Tabletop Bridge gave us language for a retention tweak finance actually approved—rare outcome from a vendor workshop.
Client in logistics
Triage Clock overlap notes are short enough to scan during coffee—finally.
Soojin · Seoul
Cloud Echo Lab worksheets kept our identity engineers in the room without turning the session into a console demo.
Mateo · Detection engineer · National retailer