Til Jamrozy

Why this persona fits the audience

He is a security analyst at a Munich-based SaaS company with 200 employees, working in a 3-person SOC that monitors application logs, identity events, and cloud access across Azure and AWS. Their current stack centers on Microsoft Sentinel and ad hoc queries during investigations.

• Age: 31
• Location: Munich, Germany
• Occupation: Security analyst
• Income: €78k base
• Education: Bachelor's in cybersecurity
• Company size: 200 employees
• Years in role: 4

“The real challenge isn't just finding the threat, it's understanding the entire chain of events that allowed it to happen in the first place.”

Born and raised in a small town near Nuremberg, Til Jamrozy developed an early fascination with how systems worked, often taking apart old electronics. His parents, both engineers, encouraged his analytical mindset. This led him to pursue a Bachelor's degree in Cybersecurity at the Technical University of Munich, where he excelled in subjects requiring logical deduction and problem-solving. Upon graduation, he joined his current SaaS company, initially as a junior analyst. Over the past four years, he has steadily grown into his role as a Security Analyst, becoming a key member of the three-person Security Operations Center. His responsibilities are broad, encompassing the monitoring of application logs, identity events, and cloud access across their Azure and AWS infrastructure. The team's primary tool is Microsoft Sentinel, supplemented by extensive use of KQL for ad hoc investigations. Til is highly conscientious, driven by a deep-seated belief in diligence and process discipline. He views his work not just as a job, but as a critical defense against increasingly sophisticated threats. This commitment means he often dedicates extra hours to understanding complex attack vectors or refining detection rules, sometimes to the detriment of his personal time. He is not motivated by status or overt recognition, but by the intrinsic satisfaction of solving complex problems and maintaining a secure environment. His financial habits are conservative; he prioritizes saving and avoids impulsive purchases, viewing money as a tool for security and future opportunities rather than immediate gratification. He sees time as a finite resource that must be managed effectively, which translates into a highly structured approach to both his work and personal life. His recent focus has been on improving the efficiency of their log analysis, exploring ways to automate certain correlation tasks within Sentinel to reduce manual effort and potential oversight.

Background & daily life

A day in their life

Til's weekday typically begins around 6:30 AM with coffee and a review of overnight alerts and security news feeds. He arrives at the office by 8:30 AM, immediately diving into the Sentinel dashboard to triage any critical incidents. The morning is often consumed by incident response, analyzing logs from Azure AD and AWS CloudTrail. Lunch is usually a quick affair at his desk while reading a technical article. The afternoon might involve threat hunting for specific indicators of compromise, refining KQL queries, or documenting recent findings. He often stays until 6:00 PM or later, especially if an investigation is ongoing, before commuting home to prepare dinner and unwind with a book or a chess game.

Lifestyle

Til lives in a modest, rented two-bedroom apartment in Munich's Schwabing district, sharing with a long-term girlfriend who works in graphic design. His routine is structured: early mornings with coffee and a quick scan of security news before heading to the office. Evenings are often spent diving into personal projects, like optimizing his home lab setup or practicing chess online. He values efficiency and avoids unnecessary spending, preferring to save for future travel or potential homeownership. Socially, he's selective, preferring deep conversations with a small circle of close friends over large gatherings.

Work life

Til's days are a constant balancing act between proactive threat hunting and reactive incident response. He spends a significant portion of his time sifting through logs in Microsoft Sentinel, writing KQL queries to uncover anomalies in their Azure and AWS environments. The 3-person SOC team operates with a lean structure, meaning each member wears multiple hats. He feels the pressure to stay ahead of evolving threats with limited resources, often staying late to complete investigations or document findings. Collaboration with his two colleagues is efficient but focused, primarily revolving around urgent alerts or complex investigations.

Relationships

Til maintains a close relationship with his girlfriend, who provides a grounding influence. His parents, retired engineers, instilled in him a strong work ethic. His two SOC colleagues are his primary professional contacts; they share a mutual respect built on competence and shared challenges. He occasionally seeks advice from a former university professor who is now a cybersecurity consultant.

How they decide

Til is a research-heavy decision-maker. He meticulously gathers information, compares options, and seeks out technical details before committing to a course of action. He values evidence-based reasoning and is influenced by peer reviews and documented performance, but ultimately trusts his own analysis. He is not easily swayed by marketing hype and prefers to understand the underlying mechanics of any solution.

How they sound

Speaks with a clear, measured cadence, using precise technical terminology. Avoids slang and overly casual language in professional settings. His tone is generally calm and analytical, even when discussing stressful situations. He tends to use German sentence structures and occasional Anglicisms common in the tech industry, but his English is fluent and grammatically sound. He is direct but polite, preferring factual statements over emotional appeals.