Security Architects — founder and security consultant

Updated 6 August 2026

Mandate

• End-to-end hybrid-cloud application security assessments — from software design through code to cloud configuration — across Azure, Google Cloud and Alibaba Cloud.
• AI and LLM security assessments; I've worked across essentially every AI service on Azure and GCP, including Vertex AI, Azure AI Foundry and Copilot.
• Threat modeling facilitation and enablement for engineering teams.
• Cloud security process documentation: designed the assessment process docs from scratch, then simplified them enough to cut client-side documentation overhead by more than 80% without losing the information that matters.
• Advisory support to C-level executives on cloud security investment and roadmap, plus running an internal customer satisfaction survey on the cloud security function's own service quality.
• Wiz.io in day-to-day use for cloud risk work, backed by Wiz Academy training.

How I work

Short, evidence-driven engagements with a prioritised remediation plan at the end. Findings state exploitability and business impact separately, and every recommendation names an owner type and an acceptance test so it can be closed objectively. Security has to be a business enabler, not a roadblock — that's the operating principle, not a slogan; it's why the remediation plans are prioritised rather than exhaustive.