Become an ambassador

"Wazuh is the backbone of how I approach detection engineering in a real-world MSSP environment. Running it as a distributed, multi-tenant SIEM across thousands of systems has taught me that strong detection is about precise, well-tuned rules rather than sheer volume. As a Wazuh ambassador, my goal is to give back to the community by sharing practical, battle-tested detection content, custom rules, decoders, and integrations and helping practitioners bridge the gap between Wazuh's capabilities and the day-to-day reality of working in a SOC."

Jerome Haas
Germany

Squad Lead Detection Engineer (SOC)
 /  pco GmbH & Co. KG

I lead the detection engineering team at the SOC at pco, a german managed security service provider (MSSP), where I focus on SIEM operations, detection engineering, and security monitoring across multi-tenant environments.

Wazuh is at the core of my daily work: I run it as a distributed, multi-tenant SIEM monitoring thousands of systems, and spend much of my time writing and tuning rules and decoders from SSH brute-force correlation and Kerberos abuse detection to Linux persistence and timely CVE coverage with a strong focus on detection coverage.

As a Wazuh ambassador, I am committed to sharing practical detection engineering knowledge with the community through blog posts, open-source tooling, and technical write-ups, helping fellow practitioners get more out of Wazuh.

Programming languages
  • Python
  • Shell Scripting
Operating systems
  • Linux
  • MacOS
  • Windows
Technologies
  • Azure
  • Cybersecurity
  • Wazuh
Available for
  • Blogposts
  • Community support
  • Testing
  • Writing tutorials