// about
I'm pretty bad at writing "abouts", especially if it's about me. But here's what I'm about:
More than a decade in cybersecurity. I've helped build and run security operations, vulnerability management, CTI teams, and threat-informed defense programs across government and private sector.
I'm a firm believer in the "wax-on, wax-off" of cybersecurity; in other words, making sure we do the fundamentals correctly. That being said, I am always looking for ways to make the fundamentals easier and better.
Find me
mastodon
infosec.exchange/@Shermski
github
github.com/netandneedle
linkedin.com/in/shermanchu1
© Net & Needle, 2026.