$PwC AI/ML & GenAI-Augmented Splunk
Unified Splunk, AWS Bedrock, and OpenSearch for LLM-driven correlation, automation, and real-time summarization.
chris@cat-ai ~ $ cat overview.md
Chris Turner
AI/ML, Cybersecurity & Splunk Engineering
Agentic systems, RAG pipelines, threat detection, Splunk engineering, and SOC modernization across regulated industries. End to end.
Resumes
$AI Resume
GenAI, agents, Bedrock
$Cyber Resume
Threat intel, SIEM, fusion
Generative AI & Agentic Workflows
LangGraph / Redis MCP / OpenSearch / LangChain / Bedrock
- Designing agentic systems with MCP memory, RAG pipelines, and prompt orchestration for enterprise AI
AI/ML-Augmented Threat Detection
Splunk / OpenSearch / Bedrock / LangChain / LangGraph / Redis MCP
- RAG, agentic workflows, vector databases, Generative AI, and LLM integration applied to security analytics
AI Engineering & Automation
Python / FastAPI / Terraform / Docker / GitHub Actions / Glue / Kinesis / Iceberg / Spark
- Building end-to-end AI pipelines with containerized MLOps and IaC automation for scalable deployment
Security Analytics & Engineering
MITRE ATT&CK / SIEM / SOAR / CrowdStrike / Tenable / SailPoint
- Threat hunting, IAM, UBA and UEBA, detection engineering, threat intelligence, fraud analytics, and OSINT
Cloud-Native AI Platforms
AWS (EKS, SageMaker, Bedrock, OpenSearch) / Kubernetes
- Architecting hybrid AI stacks for RAG, inference, and cognitive search with unified monitoring and cost control
Cloud, Data & Platform Security
AWS Glue / SageMaker / Fraud Detector / OpenSearch / Terraform / Docker / EKS
- Data lakes, Iceberg, Kinesis, CI/CD automation, MLOps, model observability, and secure cloud architecture
SPLUNK ARCHITECTURE & ENGINEERING
Platform Engineering
Splunk Enterprise / Splunk Enterprise Security (ES)
- Architecting enterprise-scale Splunk environments covering indexer clustering, search head architecture, and forwarder management
- Advanced detections, correlation searches, dashboards, and SPL logic that turn data into actionable security insights
- Data onboarding, CIM normalization, and ingestion pipelines integrating cloud, endpoint, and identity telemetry
- Automated deployment and configuration using Terraform, Git-based workflows, and modularized app packaging
AI/ML & AWS Integration
SageMaker / Bedrock / Glue / Kinesis
- Extending Splunk with AI/ML pipelines and Generative AI for anomaly detection, enrichment, and natural-language search
- Retrieval-Augmented Generation (RAG), LLMs, and agentic Splunk bots for real-time incident analysis and context-aware search
EXPLORE MORE
- Full skill set at cat-ai.io/skills
GITHUB PROJECTS & CODE REPOSITORIES
$Real-Time Sentiment Insights
End-to-end analytics integrating OpenSearch, Amazon Comprehend, and Bedrock for LLM-driven sentiment and threat insight generation.
>https://github.com/jitter-ai/aiml-realtime-opensearch-comprehend-sentiment-insights
$AWS Real-Time AI/ML Fraud Pipeline
Streaming fraud-detection architecture using Amazon MSK, Kinesis, OpenSearch, and Fraud Detector for live anomaly and risk scoring.
>https://github.com/jitter-ai/aws-realtime-ai-fraud-pipeline
$AI Data Center
On-prem AI infrastructure stack mirroring cloud architectures, automating Kubernetes, Triton, and vLLM inference with CI/CD and offline model caching.
AWS WORKSHOPS (re:INVENT 2023-2024)
$Intelligent Document Search with OpenSearch & Bedrock
Hands-on workshop at re:Invent 2024. Built a retrieval-augmented generation (RAG) application using Amazon OpenSearch Service as the vector database and Amazon Bedrock Knowledge Bases for LLM-powered document intelligence. Attendees deployed the full stack - OpenSearch index, Bedrock model, and a search UI - in their own AWS account via a self-paced catalog.
$Prepare Your Data for Generative AI
Hands-on workshop at re:Invent 2024. Demonstrated a healthcare-focused RAG chatbot emphasizing data governance, lineage tracking, and secure transformation pipelines. Covered Glue, Iceberg, and Bedrock for compliant, auditable AI - a live environment that attendees kept after the session.
AWS PartnerCast Sessions
$AI-Driven Cyber Insights: GenAI for Splunk
PartnerCast is AWS's live-streamed partner enablement program where we deploy solutions for clients and partners to demonstrate different capabilities, the same way we do at re:Invent. This session applied Generative AI and ML to Splunk security analytics by bridging OpenSearch, SageMaker, and Bedrock for conversational threat investigation.
$OpenSearch Security Analytics
PartnerCast session on unifying SIEM by integrating Splunk and OpenSearch with OCSF normalization. Covered real-time detection engineering and automated incident response across both platforms for a vendor-agnostic SOC.
$Advanced Fraud Detection with AWS
PartnerCast session on real-time fraud detection architecture using Amazon MSK, Kinesis, OpenSearch, and Fraud Detector. Walked through streaming analytics, ML-based risk scoring, and multi-sink alerting for financial services.
$Skill Builder - Global Partner Enablement
Ongoing PartnerCast and Skill Builder engagement delivering global enablement on LangGraph, Bedrock Knowledge Bases, and RAG architectures for AWS partners adopting AI at scale. Includes on-demand demos and self-paced labs.