Danaye Amin: AI SOC Tier-1 Agent
An LLM agent that reads alerts from the SIEM, investigates each one by running queries through its tools and handles Tier-1 triage.
AI & Security Engineer · Lifelong learner
I'm hooked on learning. From circuits and control systems to web, cloud and now AI, every step of my path started with wanting to understand something new and I still can't stop.
I work where AI agents meet cybersecurity: building agents for SOC work and the SIEM platforms behind them, for both IT and industrial (OT) networks. I also run production infrastructure on Kubernetes and AWS EKS.
My background is in control systems. In my M.Sc. I trained reinforcement learning controllers for quadrotors and I still think about AI the same way: systems that observe, reason, decide and act.
What connects it all is curiosity. I moved from hardware to web development, from DevOps to security and AI, because I wanted to learn what came next and I never got tired of it. Teaching has been part of that too: explaining something is the best way I know to learn it properly.
An LLM agent that reads alerts from the SIEM, investigates each one by running queries through its tools and handles Tier-1 triage.
Collects logs from Windows, Linux, switches, firewalls, antivirus, IDS, web servers, IIS and ESXi, with detection rules and dashboards. In production at several companies.
Extends the SIEM to industrial networks, with logs from PLCs, industrial switches and engineering workstations, plus OT-specific detection rules.
Questions pass through guardrails, an LLM turns them into database queries and the results come back as answers.
A phone-based assistant that answers callers' IT support questions using speech recognition and an LLM.
Researching how AI agents can be applied to security operations. Built Danaye Amin, the SIEM for IT and OT, an ERP chatbot and an IT support voice assistant. Previously Full-stack & DevOps Engineer (May 2023 – Oct 2026): Rust and stream processing, Kubernetes, Terraform and Azure.
Cloud infrastructure on AWS EKS, CI/CD with GitHub Actions, SQL Server operations, cost optimization and security hardening.
Advising on cloud infrastructure, Kubernetes, CI/CD, reliability and cost optimization.
Cloud infrastructure on AWS EKS, CI/CD with GitHub Actions, SQL Server operations, cost optimization and security hardening.
Led the technical team that built and launched a cryptocurrency trading bot, using microservices and Django REST Framework.
Worked on the company's frontend, built with Angular and TypeScript.
Learned HTML, CSS and JavaScript and built several projects under the company's technical manager.
Designed DDPG and PPO reinforcement learning controllers for a quadrotor, tested them in ROS/Gazebo, then ran the DDPG controller on a Raspberry Pi + PX4 lab platform and compared it with a PID controller.
FPGA teaching assistant and member of the Electrical Engineering Scientific Association. Ran workshops on AVR microcontrollers and MATLAB.
CS Internship
Mentored participants learning web development.
IEEE Iran Section, Hamedan Student Branch
Beginner-to-advanced Python, from basics and OOP to a small Django and deep learning project.
Karabiz Business School
Recorded a full course: HTML/CSS/JS, TypeScript with Angular and Node.js, with Git throughout.
Robotics competition, Karaj
Designed the electrical circuits and PCB for a forklift robot built in 16 hours, based on AVR.
Interested in agentic AI, security automation or bringing AI systems into production? Send me an email or a message on LinkedIn. You can also find me on GitHub and X.