I help enterprise security, platform and DevOps teams secure their multi-cloud environments, combining cloud security architecture, Infrastructure-as-Code and AI applied to security.
What I do
Four areas, the tools I use most. The full skills matrix lives on the resume.
CNAPP architecture and compliance for multi-cloud and Kubernetes estates.
Security embedded in pipelines and cloud operations, as code.
Detection engineering, dashboards and automated response playbooks.
Where it started: NGFW, segmentation and secure access at scale.
Highlighted = expert level on the resume. Also: PHP / Laravel, JavaScript, MySQL for product work.
Now · October 2026
Leading cloud security engagements across EMEA, from discovery and Proof of Value to production.
Field notes on cloud threats, IaC and AI applied to security, on this blog.
Blog
Scanning Terraform is easy. Making it a guardrail engineers trust is harder. Here is my two-layer pattern: Checkov for baselines, OPA for your own rules.
The cloud has transformed how we do business, but adversaries have followed us there. In just two hours, a single phishing email compromised 99% of cloud environments through a supply chain attack on NPM packages. Meanwhile, exposed .env files led to 7,000+ stolen credentials across 1,185 organizations, and nation-state actors now generate 40% of North Korea's GDP through cyber operations. These aren't distant threats—they're redefining risk in 2025. Discover the three most shocking findings from today's threat landscape and why traditional security approaches are no longer enough.
Happy to talk architecture, Kubernetes security, Terraform or AI applied to security.
