Security Operations
SOC and MXDR operating models, service improvement, technical assurance and transformation.
About Jamie Millar
Security operations experience from frontline delivery to strategic design.
I’m a security operations consultant based in Scotland, with more than 12 years in cybersecurity spanning SOC work, SIEM engineering, security architecture, solution design, service delivery and cross-functional leadership.
Background
Technical depth without staying in one lane.
My career has moved through hands-on security operations into architecture, principal solution design and leadership across service delivery and technical account management.
That breadth means I’m comfortable moving between detailed technical questions and broader operational decisions. I can work with analysts on a detection problem, engineers on a Sentinel integration, service teams on an operating model and senior stakeholders on what needs to change.
I’m particularly interested in problems where technology, service design and people overlap, because that is usually where security transformation either becomes useful or stalls.
Core areas
What I work across.
Microsoft Security
Microsoft Sentinel, Defender, KQL, detections, integrations and automation.
Applied AI
Evaluation, procurement and operational adoption of AI-enabled security capability.
Solution Design
Translate security requirements into designs that can be delivered and operated.
Service Delivery
Improve ownership, governance, client outcomes and the practical delivery chain.
People Leadership
Cross-functional leadership across technical and service teams through change.
How I think
Useful change should survive contact with operations.
I favour clear problem definitions, measurable outcomes and enough technical detail to test whether a proposed solution is actually plausible.
That applies equally to a SOC transformation, a Sentinel deployment or an AI use case. The question is not whether something can be built. It is whether it improves the work, can be operated consistently and leaves people with clear accountability.
Outside client work, I also build small products and tools. That keeps me close to implementation rather than treating delivery as somebody else’s problem.
Contact
Have a security operations problem to solve?
Send over the context and what you are trying to change.