Vulnerability management at scale.
Rollout of the Qualys suite (VMDR, CSAM, Patch Management) across a mixed fleet of around a hundred Windows/Linux machines with Active Directory. Cloud Agent distribution automated with Ansible, from inventory to remediation.
Centralised SOC & SIEM
Full SIEM (Wazuh/ELK) ingesting firewall and endpoint logs, with dashboards and automated Python playbooks. Detection time cut fourfold.
Secure Azure cloud
Design and hardening of Azure environments: Entra ID, identity and access management (MFA, RBAC), network segmentation and data protection. AZ-104 certified.
LAN / Wi-Fi & SD-WAN modernisation
Multi-site overhaul for 500+ users: audit, VLAN segmentation, VoIP QoS, SD-WAN rollout and Wi-Fi optimisation. Near-zero downtime during cutovers.
Web vulnerability scanner
A tool I'm building to automatically detect common web app flaws (OWASP Top 10): page crawling, injection and configuration testing, prioritised reporting.
Zero Trust segmentation
Audit of 3000+ firewall rules, flow matrix and zone-based segmentation. FortiGate HA cluster, IPsec/SSL VPN, bastions and MFA. Reduced attack surface.
SOAR & response automation
SOAR module (ELK, Wazuh, Shuffle, Cortex) to automate incident response, with red-team attack simulation and forensic analysis.