About
Security Architect, based in Burgas, Bulgaria.
I am Filip. I defend Microsoft tenants for a living. By day I work at a Microsoft MSSP, where I look after detection, identity, and incident response across 47 customer tenants. By night I write about what actually works.
My day is Sentinel, Defender XDR, Entra ID, Purview, and Intune. I care most about detection engineering: writing analytics rules and hunting queries that fire on real attacker behaviour and stay quiet the rest of the time.
I also run FY Security & Tech, an independent consultancy for organisations that need a Microsoft security posture without a full in-house team. That usually means standing up Sentinel properly, fixing Conditional Access, and building the automation that keeps it all running once I leave.
Certifications
- CCSP
- SC-100
- AZ-500
- AZ-305
- SC-300
- SC-200
- AZ-104
Contact
The best way to reach me is on LinkedIn. All links are in the footer.