Developed and improved SAST and SCA features (GoLang, Java, GitHub Actions)

Developed and patented (US12407702) internal tooling for dynamic CVE Data collection (Laravel, VueJS)

Developed cloud-based composite alert detections from Threat Intelligence (Python, Sigma, Snowflake, Neo4j)

Developed CWE categorisation and consolidation pipeline using LLM and embedding models (Python, Bedrock)

Developed internal baseline framework to compare Lacework vulnerability evaluation engine against CVE Data sources (Python)

Developed PHP language support for the SAST engine (GoLang, Semgrep)

Developed PHP language support for the Code Aware Agent (GoLang)

Developed PR Comment features and improvements for Code Security CI/CD Apps(GoLang, Java)

Established a SAST Taxonomy for SAST detections

Established an Attack Simulation program to test and validate detections (Terraform)

Performed novel research on Living Off the Land vulnerability detection and presented at BlackHat USA 2023.

Support and drive Vulnerability Management features to improve CVE data efficacy (GoLang)

Automated testing and deployment (GitHub Actions)

Design and build the entire web application (Laravel, VueJS)

Follow DevOps strategies to maintain the application and infrastructure

Define and implement Penetration Testing and Security Research strategy

Develop Penetration Testing Methodologies, and define security best practices and standards

Develop proof of concept exploits to demonstrate impact of vulnerabilities (python, bash)

Perform manual code review to discover vulnerabilities within large code bases (C#, PHP, Java)

Perform Penetration Testing & Security Research on BD's products using emerging technologies such as Kubernetes and cloud native applications

Provide guidance on secure architecture design and DevSecOps within CI/CD pipelines

Support developers in their SDLC and provide guidance for mitigating emerging threats

Utilise SAST and DAST solutions within the testing methodologies and SDLC (Checkmarx, FoD)

Team Leadership, Mentoring, and Career Planning

Develop and define engagement methodologies and frameworks

Implement automated source code analysis (SonarQube)

Plan and execute on security assessments on internal environments

Support Incident Response team during investigations, particularly where new TTPs were discovered

Advise internal infrastructure teams on designs and implementation strategies of new systems

Design and implement CyberArk as a least privilege solution and successfully manage all server and workstation local Admin accounts

Design and implement global Splunk infrastructure for security monitoring capability

Develop security monitoring detections and strategies from Threat Intelligence

Plan and execute on security assessments on internal environments

Research vulnerabilities, reverse engineer targeted malware and write associated internal advisories

Support Incident Response team during investigations, particularly where new TTPs were discovered

Served as Information Security Officer and Consultant for multiple large organizations

Conducted R&D on emerging security threats and solutions

Implemented Data Loss Prevention solutions at Royal Bank of Scotland and Standard Bank SA

Advised sales teams on technical markets and trends throughout the sales lifecycle