Whoami

Application Security Lead @ Oyster HR

Jan 2025 – present

Owning the engineering security function across application, cloud, CI/CD, incident response and AI security.

• Built the security roadmap from scratch, prioritised to business risk, and authored the quarterly and half-year security reports for leadership.
• Set the DevSecOps strategy and owned the selection of application security tooling across the SDLC; secured the CI/CD pipeline and build infrastructure.
• Eliminated Critical, High and Medium findings from the main codebase; new findings are blocked at the pull request and routed to owning teams under a severity-based SLA.
• Embedded automated security testing and secure code review into delivery, so security does not bottleneck releases.
• Owned cloud security for the platform’s workloads, including secrets management and posture reviews.
• Directed the annual third-party penetration test, disputing findings on technical merit and mitigating what stands.
• Reframed bug bounty as risk economics, modelling the risk avoided against payouts.
• Lobbied for and implemented the platform’s edge protection, with no false-positive outages.
• Built the engineering incident response capability: evidence-first investigation standards and escalation paths ready for Legal and regulators.
• Automated repetitive security response workflows, cutting resolution time by an order of magnitude.
• Owned engineering for SOC 2 Type II and ran the live auditor walkthrough.
• Led security review of AI features and authored the threat model for agentic tooling.
• Scaled security through engineering teams, retaining sign-off and accountability for outcomes; mentored a colleague into a junior security engineer role.

Lead Senior Cybersecurity Engineer @ SBM Bank

Nov 2022 – Jan 2025

Owned security operations, network and endpoint security, IAM and vendor security for a licensed bank: 1,500 endpoints, 500 staff, on-prem and cloud (Azure, GCP).

• Led SOC operations end to end; tuned detection rules to cut false positives by 32% and built SIEM and fraud-monitoring use cases with the business.
• Owned VAPT and vulnerability management, including statutory extended-scope audits, holding system custodians to remediation timelines.
• Ran privileged identity management, MFA and access reviews across on-prem and cloud; design-reviewed every digital banking project.
• Directed network and endpoint security: Portnox NAC, Check Point firewalls, F5 WAF (ZTNA); EDR/XDR and MDM across 1,500 endpoints.
• Set and enforced security requirements for vendor selection and procurement, including the bank’s SOC implementation; authored policies and standards.
• Built secure coding and DevSecOps capability across the bank: trained 500 staff and 30 engineers.

Senior Cyber Security Consultant @ PwC

Jul 2021 – Nov 2022

• Led cyber incident response on incidents with over $7M in associated losses; conducted e-discovery and digital forensics across cloud, on-prem and mobile evidence (EnCase, Intella, Cellebrite, FTK, Paladin, Tsurugi).
• Co-developed DevSecOps strategies for 3 clients, embedding scanning and pentest integration into CI/CD.
• Led security architecture and design reviews for 4 clients to fit tooling to the business case and improve ROI.
• Delivered VAPT and framework assessments (ISO 27001, NIST CSF, PCI DSS, CIS Controls, OWASP, MITRE ATT&CK, GDPR) for 10 organisations; presented risks, reports and proposed initiatives to executives and business leaders.

Penetration Tester & SOC Analyst @ Visibility Technology Services

Oct 2020 – Jun 2021

• Penetration tested 5 organisations: internal, external and social engineering.
• On-call SOC responder; authored the incident response runbooks (Splunk, ELK, FortiSIEM).