About

Operator, not influencer.
Code I run in production.

I'm echocc00, a security and network engineer based in Shanghai. I've spent nine years in cloud security & network engineering and I'm CCIE-certified. The work on this site is what I run, not what I blog about: code I deploy, alerts I page on, changes I push through review.

In 2024 I started turning one-off internal tools into seven Apache-2.0 open-source products. The thesis is simple: AI agents are good enough to take over the boring parts of security and network operations — alert triage, config generation, playbook execution — so a small team can operate like a much bigger one.

Career

Nine years, one trajectory.

From hands-on network engineering into AI-driven security operations.

  1. 2024 — now
    Open-source maintainer
    Independent · Shanghai
    Built and shipped 7 Apache-2.0 products.
  2. 2020 — 2024
    [Senior] Security Engineer
    [Industry, anonymized]
    Owned SIEM/SOAR/IR scope.
  3. 2018 — 2020
    Security Engineer
    [Industry, anonymized]
    Aligned with MLPS 2.0 (等保 2.0) controls.
  4. 2017
    CCIE RS / Security certified
    Cisco
    Hands-on multi-vendor.
  5. 2015 — 2018
    Network Engineer
    [Industry, anonymized]
    Campus + DC + WAN.
Now

What I'm working on, and what I'm looking for.

Building

Building SecSight v0.6 and NetSage v0.2.

Writing

Writing architecture deep-dives.

Looking for

Looking for staff IC, consulting, pilots.

Not looking for

Not looking for content / ML research / Web3.

Outside of work

Long-distance runner · vinyl collector · average climber.

Want to talk?

Best channel: 286043314+echocc00@users.noreply.github.com. I reply within 48 hours on weekdays.