Technical Cybersecurity Risk & Assurance Consultant

5/2024 – 7/2026

Combined defensive security operations with hands-on penetration testing, exposure validation, vulnerability management and risk-based security assessment across endpoint, identity, cloud, network and application environments.

Security Testing, Exposure and Risk Assessment
• Planned and executed security assessments across more than 100 web applications and APIs, AWS assets and more than 1000 infrastructure components using Pentera, AppCheck and manual testing techniques.
• Conducted Active Directory password-strength assessments and controlled ransomware simulations to validate defensive readiness and attack resistance.
• Validated authentication and authorisation weaknesses, vulnerable components, exposed services, insecure configurations and exploitable attack paths, separating actionable findings from scanner noise.
• Discovered and catalogued internet-facing assets, subdomains, APIs, cloud storage, certificates and shadow IT to support external attack-surface monitoring.
• Consolidated and deduplicated vulnerability findings, assessing contextual risk based on severity, exploitability, exposure, asset criticality and business impact.
• Produced prioritised remediation recommendations and communicated technical and business risk to asset owners, service owners and executive stakeholders.
• Used Tanium to assess Windows, Linux and macOS devices for vulnerabilities, missing patches, configuration weaknesses and compliance deviations.
• Supported remediation tracking and verification through targeted retesting and follow-up reporting.

Security Operations, Detection and Incident Response
• Monitored and investigated endpoint, identity, cloud and network events using CrowdStrike Falcon EDR/XDR, NG-SIEM and Identity Protection across Windows, Linux, macOS, AWS and MS Azure & Entra ID environments.
• Managed security incidents through triage, investigation, containment, eradication, recovery and post-incident review, coordinating technical actions and communicating risk and restoration requirements to stakeholders.
• Configured SIEM data ingestion, tuned detections and developed CrowdStrike Fusion workflows for phishing, account compromise, malware and infected-host scenarios.
• Improved the consistency of alert enrichment, notification and response activities through workflow automation.
• Supported CrowdStrike Falcon deployment and endpoint-fleet health, investigating installation failures and Reduced Functionality Mode issues across Windows, Linux and macOS.
Technology used: CrowdStrike Falcon EDR/XDR, NG-SIEM, Identity Protection and Fusion SOAR; Pentera; AppCheck; Tanium; Burp Suite; OWASP ZAP; Nuclei; Nmap; Metasploit; Amass; OpenVAS/GVM; Tenable Nessus; AWS; Azure; Entra ID; Microsoft Defender for Office 365; Varonis; Rubrik; BeyondTrust.

Cyber Security Engineer

5/2023 – 5/2024

• Assessed web applications, backend services and APIs, identifying and validating authentication weaknesses, injection risks, insecure configurations and vulnerable components.
• Worked with developers and service owners to explain findings, agree remediation actions and verify fixes through targeted retesting.
• Deployed and tuned Splunk dashboards, searches and alerts to improve visibility of application, infrastructure and security events.
• Developed repeatable functional and security checks using Python and JavaScript, applying security-focused QA practices to application, API and backend validation.
• Conducted cloud and cyber-risk assessments across GCP-hosted services, including IAM, API security, data protection and backend resilience; contributed to strategy, policy, UK GDPR and awareness activities.
Technology used: Splunk, Burp Suite, OWASP ZAP, Postman, Snort, Wireshark, Python, JavaScript, Cypress, Selenium, Jira and GCP.

Test Automation, Test Management

10/2022 – 10/2023

Remote freelance engagement for end customer Continental Automotive, delivered via Valantic GmbH, focused on automated validation of embedded ECU security and flashing workflows.
• Analysed ECU security test requirements and translated them into structured, traceable test specifications.
• Authored detailed test case descriptions and maintained requirements traceability in IBM DOORS.
• Automated validation of ECU flashing and OTA update workflows using Python, Robot Framework and Lauterbach PRACTICE.
• Developed automated checks focused on secure flashing, update robustness, diagnostic behaviour and repeatable embedded validation.
• Used Vector CANoe, ODIS, Wireshark and Lauterbach Debugger to validate embedded system behaviour and diagnose defects.
• Managed test execution, defect evidence, result analysis and technical reporting.
• Supported Agile/Scrum delivery using Jira and Confluence in a distributed remote environment.

Tools: Python, Robot Framework, Lauterbach PRACTICE, Lauterbach Debugger, Vector CANoe, ODIS, Wireshark, IBM DOORS, Jira, Confluence, Agile/Scrum

Cyber Security, Test Automation