Security Engineer — Seattle, WA

Murat
Zamir

I break systems to understand how they fail — then defend them. This is my corner of the internet: notes, posts, and whatever I'm thinking about. Not a resume.

Latest Writing

All posts →

Jun 26, 2026

The Cyber Kill Chain

A plain walkthrough of the seven steps in the Cyber Kill Chain, followed through one example attack from start to finish, plus where the model falls short.

From the Stream

More →

Jul 10, 2026

Field note: a pattern I keep running into - people swear their AWS WAF managed rule "does nothing." It does nothing - because they ordered it wrong. The managed rule only labels the request…

Jun 28, 2026

Currently re-reading The Web Application Hacker's Handbook. Old book, still the clearest mental model of how apps actually break. Some things don't age.

Jun 10, 2026

6am Zwift session before the day starts. Zone 2 on the indoor bike, cruising in Watopia with Nick Bare on the second screen. Nobody around, nothing loud, just easy steady watts and a quiet hour that…