Book
Security Engineering & Tooling
What each category of security tool structurally cannot see, what the evidence actually supports, how the market consolidated, and what the 5,197 postings say the job is.
The general security book. Securing & Governing AI is the AI-specific companion — this one is about the discipline as it is practised and bought.
CHAPTER 1
What the tools are, and what they structurally cannot do
Security tooling is sold on what it finds. The useful question is what each category is blind to by construction.
CHAPTER 2
Testing what is deployed — DAST, secrets, and the commoditised scanners
Why DAST lost ground and where it still wins outright; why detecting a secret is almost worthless; and why nobody sells container scanning any more.
CHAPTER 3
Cloud security — CNAPP, agents, and the alert-volume problem
What actually merged and what was bolted on; the real agentless-versus-agent trade-off; and which three things genuinely reduce ten thousand findings.
CHAPTER 4
Runtime, endpoints, and why SIEM economics are the architecture
The CrowdStrike outage as engineers should tell it, what eBPF actually changed, and why every SIEM programme becomes an argument about which logs you can afford not to collect.
CHAPTER 5
The market — consolidation, pricing, and what it means for you
Two competitors, a 200x difference in outcome, and why every pricing model in this industry quietly shapes somebody's architecture.
CHAPTER 6
Does any of it work? The evidence, honestly
What MITRE evaluations do and do not measure, why nobody can show that scanning reduces breaches, and the two directions AI is pulling at once.
CHAPTER 7
The job — four tracks, no junior door, and what is actually scarce
What 5,197 postings say the work is, why the entry-level pipeline is 1.9%, and the question to ask that 97% of employers cannot answer.
CHAPTER 8
Security pay, certifications and interviews
What the roles pay in India and abroad, whether a certification actually moves it, and the questions that recur across every security interview.