Advisory
Capability, clarity, and decision support for complex technical environments.
Before, during, and after hard problems.
Jonathan’s advisory work is built around prevention-forward capability: helping teams see more clearly, reason better, communicate more effectively, and improve before avoidable failures become expensive lessons.
When investigation is required, the same discipline applies. The point is not merely to reconstruct what happened. The point is to understand what it means and what should change.
Typical engagements
- Security operations and detection capability review
- Threat hunting and forensic reasoning workshops
- Executive-level cyber risk and incident readiness discussions
- Technical narrative and expert interpretation
- Team mentoring for analysts, responders, and investigators
Practical understanding.
Tools produce data. Teams need judgment. Leaders need decisions. The work is connecting those layers without losing the evidence along the way.