What I do
Six areas I work in, what each one involves, the tools I use, and where you can see the proof.
Security operations
Watching the alerts, finding what’s real, and stopping it fast. I’ve worked in and led a SOC, so I know both the analyst’s seat and the lead’s.
Proof: containment for DNS tunnelling cases went from about 45 minutes to under two after I automated the first response.
- SIEM monitoring and alert triage
- Detection engineering mapped to MITRE ATT&CK
- Incident response, from containment to post mortem
- SOAR playbooks for the first response steps
- Threat intelligence and OSINT investigations
- Vulnerability assessments with OpenVAS and Nmap
- Splunk
- Splunk SOAR
- Suricata
- Wazuh
- Sigma
- Wireshark
- SpiderFoot
- Palo Alto
- Fortinet
Information security & ISMS
Turning standards and laws into things people actually do. My way in was turning a data protection law into requirements for a live government project.
Proof: the ISO 27001 Practice Lab on my GitHub covers risk, the Statement of Applicability, audit, a breach drill and management review.
- Risk assessment and the risk register
- Statement of Applicability and Annex A controls
- Security policies and procedures
- Internal audit planning, following ISO 19011
- Nonconformities, root cause and corrective action
- Data protection, supplier security and business continuity
- ISO 27001:2022
- ISO 19011
- GDPR
- NDPA
- NIS2
Training & courses
I’ve trained over 150 professionals from 54 organisations, from finance and health to government and manufacturing. I build my own courses and labs.
Proof: a complete 26 deck CySA+ course, and a 12 week Cybersecurity with AI Integration programme for beginners.
- Security awareness that changes behaviour, measured by results
- Certification preparation for Security+, CySA+ and EC Council EHE
- Data protection training on the NDPA and GDPR
- Hands on labs and capture the flag challenges
- Full curriculum design, from syllabus to assessment
- Security+
- CySA+
- EHE
- Labs
- CTF
Brand identity & print
Brands that look the same everywhere they show up, from a logo to a 38 page event brochure.
Proof: Legal Lounge branding for FTLG Network across Berlin, Frankfurt and Hamburg.
- Logos and brand systems
- Event branding and brochures
- Company profiles and pitch material
- Posters, book covers and apparel
- Social media graphics
- Illustrator
- Photoshop
- CorelDRAW
- Affinity Designer
- After Effects
Web design
Websites designed and built so the client can change text and photos themselves after handover.
Proof: almahafrica.org and earthicenergy.com.
- Website design and build
- Page layouts and user flows
- Handover so clients can edit it themselves
- Basic hardening: backups, updates and login protection
- WordPress
- Elementor
- Webflow
IT support
Where I started, and still the base of everything else. Keeping people working without fuss.
Proof: four years as IT Support Technician at KF Projects Online.
- Computer, network and software setup
- User accounts and access
- Ticket based support
- Office 365 administration
- Windows Server
- Active Directory
- Office 365
- Networking
- Python
- Bash