About

I’m Yi Li, a senior SOC analyst with over 10 years of experience in security operations, based in Calgary, Canada.

My work centers on threat detection and incident response: triaging escalations, writing detection rules, and building response playbooks. I also spent several years in product management at Forcepoint and Alibaba Cloud Security, and I’m interested in how security products are designed.

I see community as one of the foundations of cybersecurity. Attackers already operate as an ecosystem, trading tools, access, and techniques. Our advantage as defenders lies in trust, in the connections we build across organizations, and in a willingness to share what we learn. That’s why I take part in security conferences and community events, volunteer locally, and share my own work here.