# Joe Choi

SOC Automation Quality Engineer

[Linked In](https://www.linkedin.com/in/joseph-choi-57028980/)

Joe Choi is a SOC Automation Quality Engineer at Dropzone AI, where he brings frontline SOC experience to the development of smarter, faster, and more reliable automation. Before joining Dropzone AI, Joe worked as a Detection and Response Analyst at Expel, leading incidents, triaging alerts, and mentoring teammates. He is passionate about combining real-world SOC expertise with automation to create solutions that meaningfully improve how security teams work.

### Explore more posts from Joe Choi

Inside the SOC

### From Subtle Anomalies to Confirmed Malice: Reconstructing a Malicious Installer Attack Chain

Why would a scheduled task run every 18 minutes? That question led to a spoofed Microsoft Teams page, a signed installer, and a hidden DLL. One anomaly unraveled a full compromise.

Joe Choi

April 15, 2026

Inside the SOC

### How an AI Analyst Reasoned Through an Atypical Travel Alert

Autonomous investigation resolves Entra ID impossible travel alerts in minutes. Case study: IPv6 analysis, MFA validation, calendar data correlation. View methodology.

Joe Choi

December 12, 2025