Securing your business, one layer at a time.
Independent cybersecurity consultant helping companies harden their cloud, identity and infrastructure against modern threats.
Senior security engineer turned consultant.
With years of hands-on experience designing and operating enterprise security programs — covering Active Directory, Microsoft cloud, vulnerability and identity management — I help B2B clients identify risks, raise their security posture and respond to incidents with confidence.
Cybersecurity consulting for modern businesses.
Cloud & Identity Security
Azure, M365 and Entra ID hardening, identity governance and privileged access design.
Vulnerability Management
End-to-end VM programs: scanning, prioritization, remediation workflows and reporting.
Security Operations
SIEM tuning, log management with Splunk, detection engineering and incident response.
Security Audits & Policy
ISO 27001 aligned audits, policies, procedures and security awareness trainings.
Attack Surface Management
External exposure discovery, continuous monitoring and risk-based remediation.
Endpoint & AD Security
Active Directory hardening, GPO baselines, Defender ATP and EDR deployment.
AI Security
Securing AI workloads, LLM risk assessments, prompt injection defenses and governance frameworks.
Tools & technologies
- Microsoft Azure
- Azure Defender
- M365 Security
- Entra ID
- Splunk
- Sentinel SIEM
- Microsoft Defender ATP
- MCAS
- Incident Response
- Rapid7 InsightVM
- Randori
- WhiteHat Sentinel
- DAST
- BeyondTrust PAM
- Active Directory
- PKI
- GPO
Selected engagements & deliveries
Security Operations Center (SOC) Modernization & SIEM Integration
Led an enterprise-wide SOC transformation by deploying a next-generation SIEM to centralize monitoring, improve detection accuracy, and accelerate incident response.
Automated Incident Response & SOAR Enablement
Designed and implemented SOAR-driven workflows to automate alert triage, containment, and escalation, significantly reducing mean time to respond (MTTR).
Enterprise Endpoint Detection & Response (EDR) Rollout
Delivered a global EDR implementation to enhance endpoint visibility, detect advanced threats, and support rapid containment across thousands of endpoints.
Cloud Security Posture Management & DevSecOps Integration
Established security governance and continuous monitoring for hybrid and multi-cloud environments, embedding security controls into CI/CD pipelines.
Zero Trust & Identity Security Transformation
Drove adoption of Zero Trust principles by strengthening identity controls, MFA, and conditional access to reduce attack surface and unauthorized access.
Enterprise Vulnerability Management Program
Built and operationalized a centralized vulnerability management lifecycle, integrating scanning, prioritization, and remediation tracking.
Threat Intelligence Integration & Threat Hunting Program
Integrated external and internal threat intelligence into SOC processes and established proactive threat-hunting capabilities.
Data Protection & Data Loss Prevention (DLP) Initiative
Implemented enterprise-wide data protection controls to safeguard sensitive data across endpoints, email, and cloud services.
Regulatory Compliance & Security Framework Alignment
Led initiatives to align security operations with recognized frameworks and regulations, supporting audits and continuous compliance.
Network Security Modernization & Monitoring
Enhanced network security architecture with advanced monitoring, segmentation, and threat prevention to limit lateral movement and improve visibility.
Let's talk about your security.
Available for B2B engagements, advisory retainers and project work. Reach out and I'll get back within one business day.
Send an email