Finland • Security • AI-assisted shipping

Ossi Talonpoika

Cyber-security lead by day, AI-assisted builder by night.

By day I lead 24/7 cyber-security operations, build SOC and MDR services, and push security toward an AI-assisted, risk-based, human-focused practice. By night I build useful things with AI coding agents, mainly across smart-home, voice, and Finnish-language tools.

Day / night split

Security leadership in daylight, practical building after hours.

The portfolio is deliberately split between the operational discipline of security work and the faster iteration loop of AI-assisted product work.

By day

Leading human-focused, risk-based security operations.

I lead round-the-clock cyber-security operations, shape SOC and MDR services, and focus on making security more AI-assisted without losing accountability, signal quality, or operator usability.

  • 24/7 operations
  • SOC and MDR service building
  • Risk-based decisions
  • Human-focused workflows

By night

Building useful software with AI coding agents.

Outside security operations, I use agent-assisted workflows to build small, useful products with an emphasis on smart-home automation, voice interfaces, and Finnish-language tooling.

  • Smart-home tools
  • Voice interfaces
  • Finnish-language software
  • Small useful products

Selected work

Recent projects with a bias toward utility.

These are factual snapshots of the current public work: what each project is for, how mature it is, and what the stack looks like.

Alpha / public preview

Pesisselostaja

Browser app for Finnish pesäpallo live events with spoken Finnish announcements.

  • TypeScript
  • Vite
  • Browser speech
  • Piper
Personal alpha

Personal Finance App

Self-hosted single-user finance tracker with imports, categorization, pattern detection, and three-month forecasting.

  • TypeScript
  • Vite
  • Fastify
  • SQLite
  • OpenAI
Voice assistant PWA

Home Realtime Assistant

Always-listening PWA voice assistant using the OpenAI Realtime API over WebRTC, with a restricted schema and allowlist tool gateway.

  • TypeScript monorepo
  • pnpm
  • Docker
  • WebRTC
Home Assistant integration

Finna Library

Finnish Finna library integration for Home Assistant covering loans, due dates, holds, fines, renewal, and saved-search alerts.

  • Python
  • Home Assistant
  • HACS

How I build

Plan first, test early, automate the boring risk away.

The delivery approach is agent-first, but not improvisational. The goal is to make speed repeatable by keeping planning, validation, and review visible in the loop.

Working principles

  • Plan first so the implementation path is explicit before code moves.
  • Use test-driven development where it sharpens the seam and catches regressions early.
  • Keep automated code review and security review in the default path.
  • Lean on strong PowerShell and Bash automation to keep workflows repeatable.

Delivery posture

Agent assistance is most useful when it is constrained by a plan, backed by tests, and checked by automation. That combination turns speed into a system instead of a burst.

The output is meant to be maintainable by humans first, even when the implementation loop is heavily AI-assisted.

Toolbox / areas

Areas I work across.

This is not a scorecard. It is a simple map of the domains and tools that recur in the work above.

Security operations

  • 24/7 operations
  • SOC
  • MDR
  • Risk-based practice

Product and platform

  • TypeScript
  • Vite
  • Fastify
  • SQLite

AI-assisted software

  • AI coding agents
  • OpenAI APIs
  • Plan-first delivery
  • Automated review

Home and voice systems

  • Home Assistant
  • Realtime voice UX
  • WebRTC
  • Automation scripting