10/29/2026 updated
Premium member
100 % availablePenetration Tester | Lead Cyber Essentials Plus Assessor
London, United Kingdom
Worldwide
BSc (Hons) Cyber Security (NCSC-certified)About me
Cybersecurity professional with hands-on experience across penetration testing, security operations, vulnerability assessment, security assurance, and Cyber Essentials Plus. I hold CREST CRT, CREST CPSA, OSCP+, and IASME Cyber Essentials Plus Lead Assessor.
Active DirectoryPenetration TestingMicrosoft AzureNetwork SecurityMicrosoft Security EssentialsVulnerability ScanningQualified Security AssessorComptia Pentest+ CEPenetration ToolsSecurity TestingVulnerability ManagementNetwork TestingSecurity AuditsComptia Cloud EssentialsFirewalls (Computer Science)
Penetration Testing
Expertise in conducting penetration tests across internal and external infrastructure, web applications, APIs, and Active Directory, using tools such as Nessus, Nmap, Burp Suite, Metasploit, BloodHound, Impacket, NetExec, Responder, and Certify, following CREST and PTES methodology.
Cyber Essentials Plus Assessment
Proven track record as a Lead Cyber Essentials Plus Assessor, guiding organisations through all five technical control domains including secure configuration, patch management, access control, malware protection, and firewalls, aligned with IASME and NCSC standards.
Security Operations and Detection Engineering
Background in Microsoft Sentinel SOC operations, including engineering custom KQL detection rules, real-time monitoring and triage of security alerts, incident response (DFIR), and threat hunting using Microsoft Defender for Endpoint (EDR), WAF logs, and network traffic analysis.
Cloud Security Reviews
Configuration reviews across Microsoft Azure, M365, and Google Workspace, applying CIS Benchmarks to identify misconfigurations and improve cloud security posture.
Vulnerability Assessment
Execution of authenticated and unauthenticated vulnerability scans using Tenable Nessus, triaging scanner output, validating exploitability, and producing client-ready reports prioritised by CVSS and business impact.
Governance, Risk, and Compliance (GRC)
Knowledge of Cyber Essentials and Cyber Essentials Plus frameworks, IASME and NCSC guidelines, firewalls, secure configuration, patch management, access control, and malware protection.
Technical Report Writing
Authoring technical reports and executive summaries that map findings to the OWASP Top 10, with reproducible proofs of concept and remediation recommendations prioritised by exploitability, CVSS, and business impact.
OSINT and Reconnaissance
Application of OSINT techniques and build reviews as part of offensive security engagements to gather intelligence and assess attack surfaces.
Expertise in conducting penetration tests across internal and external infrastructure, web applications, APIs, and Active Directory, using tools such as Nessus, Nmap, Burp Suite, Metasploit, BloodHound, Impacket, NetExec, Responder, and Certify, following CREST and PTES methodology.
Cyber Essentials Plus Assessment
Proven track record as a Lead Cyber Essentials Plus Assessor, guiding organisations through all five technical control domains including secure configuration, patch management, access control, malware protection, and firewalls, aligned with IASME and NCSC standards.
Security Operations and Detection Engineering
Background in Microsoft Sentinel SOC operations, including engineering custom KQL detection rules, real-time monitoring and triage of security alerts, incident response (DFIR), and threat hunting using Microsoft Defender for Endpoint (EDR), WAF logs, and network traffic analysis.
Cloud Security Reviews
Configuration reviews across Microsoft Azure, M365, and Google Workspace, applying CIS Benchmarks to identify misconfigurations and improve cloud security posture.
Vulnerability Assessment
Execution of authenticated and unauthenticated vulnerability scans using Tenable Nessus, triaging scanner output, validating exploitability, and producing client-ready reports prioritised by CVSS and business impact.
Governance, Risk, and Compliance (GRC)
Knowledge of Cyber Essentials and Cyber Essentials Plus frameworks, IASME and NCSC guidelines, firewalls, secure configuration, patch management, access control, and malware protection.
Technical Report Writing
Authoring technical reports and executive summaries that map findings to the OWASP Top 10, with reproducible proofs of concept and remediation recommendations prioritised by exploitability, CVSS, and business impact.
OSINT and Reconnaissance
Application of OSINT techniques and build reviews as part of offensive security engagements to gather intelligence and assess attack surfaces.
Experience
Professional experience0 - 5 years
Freelancer since2026
Languages
EnglishNative speaker
Project history
Conducts penetration tests against internal and external infrastructure, web applications, APIs, and Active Directory. Runs authenticated and unauthenticated vulnerability scans using Tenable Nessus, triages scanner output, validates exploitability, and produces client-ready reports. Authors technical reports and executive summaries following CREST and PTES methodology. Conducts configuration reviews against CIS Benchmarks across cloud, Windows, and Linux infrastructure. Improves internal testing methodologies and documentation, and collaborates with sales and onboarding teams to scope penetration testing engagements.
Led end-to-end Cyber Essentials and Cyber Essentials Plus engagements, guiding organisations through all five technical control domains. Ensured 100% compliance for all assessment deliverables aligned with IASME and NCSC guidelines. Identified high-risk misconfigurations across Microsoft 365 environments using Tenable Nessus. Also operated as a Security Operations Center Analyst, conducting 24/7 real-time monitoring and triage of security alerts within Microsoft Sentinel, writing and tuning custom KQL detection rules, investigating threat data across Microsoft Defender for Endpoint (EDR), WAF logs, and network traffic, and producing monthly SOC reports and post-incident briefings.