ALEN PERIC
Menu
Senior Cyber Threat Intelligence Analyst · Applied AI Builder

Find what hides. Make the next move count.

Threat intelligence built for decisions that cannot wait. Deep- and dark-web research, digital-risk investigations, and AI-enabled systems reveal exposure earlier and turn scattered signals into action.

See the proof View Alen Peric on LinkedIn
HundredsAnalyst hours returned
2High-stakes CTI environments
PublishedCrowdStrike research
4Open-source security builds
01Approach

SEE EARLIER × DECIDE FASTER × BUILD LEVERAGE

Security teams do not need more noise. They need the signal that changes the decision.

Experience across financial services and frontline threat intelligence has shaped a practical view of risk: the most valuable signal is often outside the perimeter, incomplete, and already moving. The work connects deep- and dark-web activity, identity exposure, phishing infrastructure, ransomware, and third-party risk to the decisions leaders actually face.

That intelligence becomes more valuable when it scales. Analyst automation, open-source security tools, distributed Ray/K3s infrastructure, and local AI systems turn repeated manual work into durable capability. Results are tested in the lab, applied in real workflows, and shared in plain language.

01

Expose the blind spot

Find the external signals conventional monitoring misses.

02

Turn signal into judgment

Separate evidence from assumptions, state confidence, and make the decision easier.

03

Build the advantage

Automate repeatable work so skilled people stay focused on the problems that need them.

02Experience

Experience in practice

Frontline intelligence across a global cybersecurity leader and one of Canada’s largest financial institutions.

2024 — NOW
CrowdStrike

Senior Threat Intelligence Analyst

Investigates threats developing across the deep and dark web, digital-risk surfaces, identity exposure, and adversary infrastructure. Builds analyst automations that return hundreds of hours, strengthens repeatable workflows, and mentors new talent so intelligence scales beyond one analyst.

  • Hundreds of hours returned
  • Scalable analyst workflows
  • Talent development
2021 — 2024
Royal Bank of Canada

Threat Intelligence Analyst → Senior

Built third-party breach policy, ran deep- and dark-web monitoring, investigated ransomware and phishing ecosystems, and supported compromised-data retrieval. Connected outside-the-perimeter risk to repeatable tracking and response across the bank.

  • Third-party breach policy
  • Deep- and dark-web monitoring
  • Ransomware response

VERIFIED CREDENTIALS

Credentials behind the capability

Hands-on offensive security, cloud AI, quantum computing, and a three-year cybersecurity education.

Cybersecurity Advanced DiplomaFanshawe CollegeVerify credential Microsoft Azure AI FundamentalsMicrosoftVerify credential Offensive Security Wireless ProfessionalOffSecVerify credential Quantum Computing Specialist — HonorsArcitura EducationVerify credential Practical Network Penetration TesterTCM SecurityVerify credential eLearnSecurity Junior Penetration TesterINE SecurityVerify credential
03Public thinking

Research built to be used

Read all on LIGMA.BLOG ↗
Embodied AI · HomelabSep 2026 · 14 min read
New field note · LIGMA.BLOG

FlyCraft: Putting a Fruit-Fly Brain in Minecraft

A simulated connectome, first-person vision, and a Minecraft reward system that taught me why a rising score does not mean a smarter agent.
Threat intelligence · AI securitySep 2026 · 7 min read
Field note · LIGMA.BLOG

Your identity. Their AI agent.

How public information could fuel AI impersonation agents, what the campaign evidence supports, and where familiar conversations need stronger verification.
Local AI · HomelabSep 2026 · 6 min read
Field note · LIGMA.BLOG

Big Model, Small GPU — Running GLM-5.3-Flash at Home

How quantization, CPU offloading, and stubborn optimism made a 320B-class model run on a single 16 GB consumer GPU.
CrowdStrike · Threat Hunting & IntelFeb 2026
External article · CROWDSTRIKE.COM

The Art of Deception: How Threat Actors Master Typosquatting Campaigns

A field-level look at redirect chains, geo-filtering, spoofed registration data, and fake sale pages—the infrastructure choices that help typosquatting campaigns hide in plain sight.
AI securityField guide

The Top 8 LLM Vulnerabilities

A direct map of eight failure modes, the controls that matter, and a practical path to securing enterprise AI.

More from the blog

Practical ideas from AI infrastructure to security fundamentals
Learning Ray on K3sAI infrastructure Governing AI, One Boardroom at a TimeAI governance The Way of the Voice in AI PromptsPrompt engineering From Pilots to ProfitEnterprise AI Blackwell Brawl: vLLM Meets RTX 5070 TiLocal AI Top 5 Security Practices for Small BusinessesSecurity fundamentals

OPEN-SOURCE BUILDS

When a workflow repeats, it becomes a tool.

Phish Hunter

Cuts the time between suspicious domain activity and analyst review.

Domain monitoring · Python Cyber LLM RAG

Makes security knowledge retrievable across a distributed local-AI stack.

Ray · K3s · Retrieval Telegram Auto Downloader

Turns monitored channels into a repeatable collection pipeline.

Collection automation · Python Fang / De-Fang

Removes friction from safely sharing and restoring indicators.

Analyst utility · Web

SELECT CONVERSATIONS

Bring the problem that does not fit neatly in a ticket.

The strongest conversations start with an exposed asset, a weak signal, an intelligence process that will not scale, or a security decision missing evidence. If that sounds familiar, the channel is open.

BEST FIRST STEPStart a conversation Inspect the builds Read the field notes