Operator, not influencer.
Code I run in production.
I'm echocc00, a security and network engineer based in Shanghai. I've spent nine years in cloud security & network engineering and I'm CCIE-certified. The work on this site is what I run, not what I blog about: code I deploy, alerts I page on, changes I push through review.
In 2024 I started turning one-off internal tools into seven Apache-2.0 open-source products. The thesis is simple: AI agents are good enough to take over the boring parts of security and network operations — alert triage, config generation, playbook execution — so a small team can operate like a much bigger one.
Nine years, one trajectory.
From hands-on network engineering into AI-driven security operations.
-
2024 — nowOpen-source maintainerIndependent · ShanghaiBuilt and shipped 7 Apache-2.0 products.
-
2020 — 2024[Senior] Security Engineer[Industry, anonymized]Owned SIEM/SOAR/IR scope.
-
2018 — 2020Security Engineer[Industry, anonymized]Aligned with MLPS 2.0 (等保 2.0) controls.
-
2017CCIE RS / Security certifiedCiscoHands-on multi-vendor.
-
2015 — 2018Network Engineer[Industry, anonymized]Campus + DC + WAN.
What I'm working on, and what I'm looking for.
Building SecSight v0.6 and NetSage v0.2.
Writing architecture deep-dives.
Looking for staff IC, consulting, pilots.
Not looking for content / ML research / Web3.
Long-distance runner · vinyl collector · average climber.
Want to talk?
Best channel: 286043314+echocc00@users.noreply.github.com. I reply within 48 hours on weekdays.