Robin Hayer

Background

About Robin Hayer

Security Engineer specializing in OT/ICS security and security automation. I build tools that make security operations faster and more effective—my automation platforms have improved efficiency by 60-85%. At Quorum Cyber, I architect OT security automation for critical infrastructure environments. My team handles 3,500+ incidents weekly using custom-built workflows in Python, Golang, and Azure. I’ve developed automation that reduced incident response time by 60% while managing deployment and configuration of OT sensors across multiple client sites. Previously at Difenda, I engineered a cross-platform SOC automation tool using NodeJS, Electron, and Python (later rewritten in Tauri with Rust). The tool improved SOC analyst performance by 67% and log processing speed by 85%. It started as a solution to a bottleneck problem—now it’s standard tooling for the entire team. Before that at Cyderes, I executed full incident response lifecycles using multiple EDR and SIEM platforms, managing analyst teams as Shift Lead while developing processes that improved response times. Technical focus: • OT/ICS security for critical infrastructure (energy, utilities, manufacturing) • Security automation and orchestration (Python, Golang, Rust) • Microsoft Azure security stack (Sentinel, Defender for IoT, Logic Apps, Function Apps) • Advanced PCAP analysis and threat detection for industrial control systems • SIEM platforms (Splunk, QRadar, Sumo Logic, LogRhythm, Exabeam) • KQL query development for threat intelligence and automated detection Tech stack: Python | Golang | Rust | JavaScript/TypeScript | Azure | KQL | Wireshark | MITRE ATT & CK | Git Certifications: • Microsoft SC-200: Security Operations Analyst • Sumo Logic Certified Administrator & Cloud SIEM Administrator • Siemplify Certified SOAR Analyst/Developer/Operator I’m looking for Security Engineer roles where I can leverage my automation expertise and OT security experience to solve complex security challenges. Open to opportunities in cloud security, DevSecOps, and OT/ICS security engineering.