AppSec• Worked closely with engineering teams to adapt CI/CD workflows to meet new regulatory requirements.• Implemented Burp Suite to scan web applications in production and acceptance environments.• Deployed security infrastructure to AWS and GCP via Terraform.• Evaluated organisations' security controls within DevOps practices, identifying gaps and advising on areas of improvement.Platform Security• Responsible for hardening Google Kubernetes Engine (GKE) clusters.• Worked alongside engineering teams to enhance security within clusters, such as implementing TLS enforcement and robust secrets management.• Collaborated with engineering teams on incident investigations and to resolve downtime.Cloud Security• Implemented security controls to align GCP production environments to SOC2 compliance standards.• Developed and enforced robust access control.• Created metrics and alerts to proactively identify security incidents.Architecture Reviews• Conducted architecture reviews for organisations acquiring new SaaS applications, including configuration and integration with existing infrastructure.• Identified security risks and recommended appropriate remediation and mitigation options.

Assessments• Led in-depth security assessments with vendors across multiple security domains including Cloud,Networking, Incident Management, and Identity & Access Management.• Provided guidance and instruction to vendors to meet security requirements and reviewed all proposedsolutions before implementation.• Created and managed assessment strategies for global vendors, leading my peers to ensure a consistent methodology and remediation plan across all regions.• Collaborated with Apple procurement and vendor procurement teams to determine liability forremediation costs based on contractual agreements.Implementation Projects• Collaborated with Apple IT and Operations when onboarding new vendors, and when current vendorsimplemented infrastructure changes.• Ensured new vendors set up their infrastructure securely before go-live by implementing measuresincluding network segregation, access control, device management, and logging. Vulnerability Management• Built and designed an automated process to ingest vendor vulnerability reports and publish them toTableau for internal review.

Microsoft Office 365 Migration • Worked as part of a security team to identify and implement security controls for a large MicrosoftO365 migration involving over 50,000 users.• Tasked with defining the IAM migration requirements based on the client’s needs and throughleveraging Microsoft best practices.• Carried out Active Directory Security Testing to validate the controls in place and identify andremediate unexpected behaviour.Identity and Access Management (IAM)• Led workshops to identify the current state of the organization's IAM, identifying both usability andsecurity concerns when accessing company resources.• Created a final report under the guidance of senior management outlining the organization's currentIAM state, security, and usability concerns, and recommended projects that could be carried out toremediate these concerns.