Andreas Rogge

📋 Biography

Andreas Rogge is a Principal SOC Engineer at water IT Security GmbH, a Microsoft-focused MSSP in the DACH region. Besides onboarding customers to Microsoft Sentinel, he focuses on what an agentic SOC looks like in practice: which parts of an analyst's work AI agents can actually take over, and where a human still has to decide. He tries that out hands-on, most recently with a multi-agent SOC proof of concept he built on Microsoft Foundry, and tests new AI features in the Microsoft security stack. He has worked in IT since his apprenticeship in 2010. Andreas shares most of what he learns. With a colleague he hosts "Die Sentinels", a German-language podcast on Microsoft Security, and their episodes and German blog posts are on https://die-sentinels.de. He runs the water lab session series and leads water's internal tech community, where he started multiple Focus Groups. He also blogs at m365xazure.de and water-security.de, and his KQL queries and the M365Watcher tool are on GitHub.