Cyber Security Architect | Identity & Security Platform Governance | AI-enabled Security Automation

Cyber Security Engineering
Design, implementation, and management of end-to-end security infrastructures covering the full security lifecycle in high-criticality enterprise environments including aviation, healthcare, financial services, and transportation

AI Security Consulting
Secure AI integration with locally deployed LLMs and data residency enforcement, AI workflow integration with existing security processes, GDPR alignment, and data minimisation

Vulnerability Management
Implementation and operational management of enterprise Vulnerability Management programs with automated scanning, manual validation, risk-based prioritisation, and remediation tracking

EDR Deployment and Operations
Design, deployment, and migration of Endpoint Detection and Response solutions in multi-platform enterprise environments with policy engineering and zero-touch onboarding

SIEM Engineering
Implementation and optimisation of SIEM platforms with alerting logic, log normalisation pipelines, detection use cases, and correlation tuning to reduce noise and false positives

Firewall and NGFW Engineering
Design and maintenance of high-availability NGFW infrastructures with zero downtime, policy sets with IPS tuning, and normalised logging to SIEM for centralised monitoring

Privileged Access Management
PAM platform administration with Just-in-Time access, automated credential rotation, session recording, and periodic access reviews with full traceability

Cloud Security
Secure cloud architecture design with Zero Trust and defence-in-depth principles, Global IT Asset Inventory with cloud connectors, and compliance reporting per business unit

Identity and Access Management
Enterprise IAM with compliance policies, Microsoft 365 security baselines, MDM/MAM with automated remediation pipelines, and geo- and behaviour-based detection

Network Security and SASE
SASE solutions with full tunnel and selective split tunnel for third-party VPN interoperability, Always-On enforcement with alerting and automatic recovery

Incident Response and Threat Hunting
Cross-domain incident handling with standardised playbooks, malware analysis and reverse engineering, IOC feeds, threat enrichment, and detection updates aligned with MITRE ATT&CK