After 18 years securing satellite and space operations at EUMETSAT and the European Space Agency, I'm open to two kinds of work: a senior role in your security team, or a consulting engagement where you need experienced help.
A role where I can shape security architecture and strategy, lead people, and keep building in cloud, DevSecOps and AI security.
My full background is on the About page. A detailed CV is available on request.
Focused, fixed-scope engagements. Each one is based on work I've done in large, regulated, mission-critical environments.
An independent look at your security architecture across cloud, on-premise and OT, ending in a clear, prioritised plan.
Built a unified security architecture across OT, cloud and corporate IT.
How to organise, staff and run a security function: roles, processes, and how security works with engineering.
Led a team of ~15 engineers; took an ISMS to ISO 27001 certification.
Security built into CI/CD, with checks developers accept: secrets, code, containers and infrastructure as code.
Defined DevSecOps objectives and pipeline controls; GIAC GCSA.
Securing machine-learning systems, and using ML to strengthen security, from threat modelling to safe adoption.
GIAC GMLE; OffSec AI red teaming in progress.
30 minutes to understand your situation and goals.
Fixed scope, timeline and price. No surprises.
Findings your team can act on, and help doing it.