About

I started in IT operations in Luxembourg fifteen years ago and moved into security gradually, mostly inside the financial sector. The current role is IT Security Officer — oversight of the security stack (IBM QRadar, Microsoft Defender) in a regulated environment.

Most of what's on this site was built outside that job. The technical depth is self-taught: a home Proxmox lab that runs my mail, web, and analysis infrastructure across several domains; web tools and cheatsheets at cyberramen.com; experiments and reference material at lab.johlem.net. The day job pays for the time. The work here is what I actually choose to do with it.

I don't think of the surfaces as separate. The same way of looking at things drives the photography (analog, black and white, mostly Luxembourg) and the security work — pattern recognition over a long enough time horizon to start seeing the structure. The aesthetic decisions on this site come out of that, not out of branding.

Currently studying for CISSP and OSCP. Both should be done within the next year. They are useful credentials in the regulated environments I work in, but they are not the point.

This site is the work.