Who we are
We are a small team of passionate technologists that specialise in the enhancement of your Security Operations (SecOps) monitoring capabilities. More than anything we want to see your Security Operations Centre (SOC) succeed. In addition to years of security operations experience, our team also brings a unique background in IT, DevOps and Red Teaming.
Our Services
Build
Need to stand up a SOC and you are not sure where to start? Our experts will work closely with you to design a solution that delivers the highest quality at the lowest possible cost to you.
Review
Having trouble with identifying areas of improvement? We assess the threat profile of your business and will recommend capabilities that are best suited to protect your most vital assets.
Enhance
Don't have time to get through the backlog of improvement tasks? Our technical consultants will implement those line items that your team just doesn't have time to address.
Mentor
Are you too busy to mentor junior staff? We can provide you with one-on-one mentoring sessions that enable people to make better decisions, gain new perspectives and broaden skillsets.
How we can help
We understand that finding and keeping experienced cyber security professionals is exceptionally challenging. We also know that most security teams only have enough resources to focus on reactive tasks, leaving very little time to spend on anything proactive such as: capability uplift, detection rule tuning, implementing new tooling and continuous improvement.
We can alleviate your concerns by filling the skills gap and providing you with highly experienced technical expertise when you need it most. You can rest assured that when the adversary breaches your first lines of defence you will be best placed to detect and respond with Simply SecOps by your side.
Get expert advice
Most of our competitors will sell their “A Team” but will deliver inexperienced graduates to carry out the work! We believe this to be unacceptable and will always provide highly capable experts.
Beat the budget
Our seasoned experts employ unique methods of identifying and eliminating wastage within your security programme, allowing you to redirect the money saved into more important capabilities.
Proven & trusted
Over the years, our experts have built a variety of SOCs for a diverse set of customers ranging from private enterprise to federal government, and even a SOC-as-a-Service provider.
About Us
Sean Lengyel
FounderWith 15 years of experience in the field of IT and Cyber Security, Sean has built a unique and deep level of understanding of the cyber threat landscape. Over the past five years, Sean has built and optimised several Security Operations Centres for both commercial and government entities. Having served in a variety of offensive and defensive cyber roles throughout his career, Sean provides clients with holistic methods to tackle the ever-evolving and complex web of cyber threats.
LinkedInOur Methodology
We know that every business is unique which is why we apply a methodology instead of stringent and often clunky standards.
Understand the needs of your organisation
Developing a cyber detection operations roadmap
Execute objectives & continuously improve
Case Studies
Client Profile
Private Sector - Cloud Services Provider
Multinational Organisation - Australian Headquarters
200GB of log ingest per day - Approximately 1,000 machines
Threat Profile - Likely to be targeted by low & medium tier cyber adversaries
Risk Profile
50+ cloud endpoints exposed to the web linked to several production environments. Said production environments stored a large amount of data considered to be business critical to the end user. The client also possessed legacy IT infrastructure hosted in various datacentres which made up a smaller footprint of the overall technology landscape. Jump hosts into protected enclaves were considered key terrain and required additional levels of hardening and monitoring. Moreover, the company had a complex and varied user base which added considerable difficulty to applying a consistent detection engineering approach.
Required Capabilities
Security Information & Event Management | Endpoint Detection & Response | Vulnerability Management | Identity Access Management | Security Case Management | Remote Incident Response Team | Security Event Triage & Analysis | Malware Sandbox Analysis
The Outcome
- Gained visibility across all IT and cloud infrastructure where this was severely lacking.
- Even at a low level of maturity the SOC detected various attack simulations carried out by a known provider.
- Telemetry gained led to detecting a high number of OPSEC failures & poor practices throughout the organisation.
- Avoided a major catastrophe due to the early detection of a security breach within minutes of initial access.
Client Profile
Public Sector – Various Government Agencies
Australian Company – Provider to Government Agencies
2TB of log ingest per day – 10,000 to 12,000 machines
Threat Profile - Likely to be targeted by low, medium & high tier cyber adversaries
Built it and they will come…
The project required a SOC to be built for various State and Federal Government customers. The organisation required the SOC to be compliant with Australian Federal Government Information Security Manual (ISM) and the Protective Security Policy Framework (PSPF). Due to the sensitive nature of the customers being monitored the SOC had to be staffed with Australian Government Security Vetting Agency (AGSVA) cleared personnel located in country. The nature of the threat environment required the inclusion of more advanced capabilities in order to be best placed to detect Advanced Persistent Threats (APTs).
Required Capabilities
Security Information & Event Management | Endpoint Detection & Response | Vulnerability Management | Security Case Management | Remote Incident Response Team | Security Event Triage & Analysis | Security Orchestration Automation & Response | Malware Sandbox Analysis | Machine Learning | IOC Feed | Digital Forensics | Fly-Away Incident Response Team | Cyber Threat Intelligence | Threat Hunting | Reverse Engineering | Insider Threat Detection | Purple Teaming | Red Teaming
The Outcome
- The SOC operations floor was built and rated to Zone 4 in accordance with the Australian Government PSPF.
- Deployed the infrastructure using DevOps methodologies and an Infrastructure-as-Code (IaC) approach to facilitate for rapid scaling as required on a per customer basis.
- Provided the market with a tiered service offering model catered specifically to government customers.
Client Profile
Private Sector – SOC-as-a-Service Provider
Australian Company – Serving Public & Private Sector
650GB of log ingest per day - Approximately 3,500 machines
Threat Profile - Likely to be targeted by low & medium tier cyber adversaries
Risk Profile
As a Managed Security Services Provider (MSSP) to a diverse range of government and private sector customers, nothing is more important than being able to provide a high quality monitoring service that alerts on attacker behaviour as early as possible. Customers of the MSSP employ a wide range of applications, operating systems, and cloud platforms. Some customers place high value on documents and spreadsheets that contain personal information, whilst other customers place high value on specific business applications/services.
Required Capabilities
Security Information & Event Management | Endpoint Detection & Response | Vulnerability Management | Security Case Management | Remote Incident Response Team | Security Event Triage & Analysis | Malware Sandbox Analysis | Machine Learning | IOC Feed | Security Orchestration Automation & Response
The Outcome
- Rebuilt SOC infrastructure and migrated existing customers to the new EDR & SIEM platform within three months.
- Reduced 10,000+ false positives across 10+ customers down to a small handful per day in less than three months.
- Created a very low cost SOCaaS capability that is possibly the most cost-effective offering in Australia.
- Implemented 30+ custom detection rules tailored to each client within six months of onboarding.