In this role I wear many hats:Compliance Management and Delivery: - PCI DSS - PCI 3DS - PCI SSF - CyberEssentialsCybersecurity: - Application Pentesting - Infrastructure Pentesting - API Pentesting - Cloud Pentesting - AI Attack Surface - Subject Matter Expert - across all domains - SAST\DAST tools (Semgrep, Sonarcube, Snyk) - Training (SANS25, OWASP10)Frontend Product: - Website Administration - Webserver Administration - Utility Application DevelopmentPlatform Exeperience: - Cloudflare - Qualys - Lacework - DatadogNew product and platform discovery. I actively seek out new platforms that can be used to strengthen the security posture of the business.

In this role I performed vulnerability and compliance scans using the Qualys and Acunetix platforms.The results were checked with a number of standard tools as supplied by the Kali and Parrot OSes, once any remediation was put in place or plans created standard reports were created for the client (including SCP.05 and SCP.04 and PCI compliance). With clients, where customisation had taken place in standard platforms, I worked to ensure that outstanding CVEs were covered.I also worked on creating Standard Operating Procedures and developed a Pentesting and Vulnerability Scanning methodology for the company in preparation for registration as an ASV.I also provided support for other departments to meet operational requirements by supplying tools and expertise where required.

Created and managed the organisations online infrastructure. This included web servers and email server.Diagnosed and rectified issues on Linux and Windows and developed an internal support infrastructure across the organisation.Provided continued maintenance and development of bug fixes and patch sets for existing web applications.Advocated and supported the use of Open Source technology for our online infrastructure.Provided R&D on new technologies and implemented those that would provide a tangible benefit to the organisation.Worked with our designer to create new sites and applications to support the organisation.Provided front line support for our clients and external affiliated organisations.Solved complex issues with server optimisation and bug hunting.Worked on, and created, all aspects of online security including server hardening and bespoke solutions to the organisations own security issues.Created a Cybersecurity framework, based on NIST, for the organisation to apply to both online and on-site assets.Established compatibility with third party software products by developing programme for modification and integration.Managed SEO and hacker marketing.Produced upgrade plans and targets for the organisation to expand and future proof their digital services.Worked with Fundraising and Marketing to produce targeted solutions to expedite membership growth and increase the impact of appeals. Trained new members of the department in programming and CMS management skills.

Worked with all departments to coordinate content for publishing to our website. Established a quality assurance chain.Introduced the concept of analytics and SEO to the organisation so that content could be organised and tracked properly.Added a support network so that internal issues could be managed through a ticketing system.Ported the original bespoke webDNA based platform across to Open Source CMS solutions.Introduced the concept of data security and took on the roll of Systems Admin for our online infrastructure.Worked with third party providers to leverage the organisations knowledge into building better external support networks.Engaged in Research and Development of bespoke solutions to increase workflow across the organisation.Created, managed, and implemented a plan for future expansion of our online infrastructure.Worked on integrating our back office workflow so that captured online data could be better used to expedite positive change within the organisation.Built software to drive aspects of the visitor centre experience.

Worked as lead programmer on a high profile project to deliver autonomous data collection and analysis via both electronic and paper based questionnaires.Developed technologies to automate the recovery of OCR data and integrate it within the system for analysis.Co-developed a method of performing questionnaire analysis to ensure that captured results would be meaningful.Created a markup language to describe a questionnaires content for easier machine translation.Implemented a drag and drop method for building questionnaires.Worked in association with the Institute for Educational Technologies, the Knowledge Media Institute, the School of Psychology, and the Open University Business School to develop, and aid in the creation of, many projects.

Micro manage and support courses for 100+ people per week. Supplied feedback to the central development team so that we were always providing the most accurate materials and modified course structure on the fly to adapt to student requirements. Also I managed and supported the IT infrastructure for the school and advocated new technology for better delivery.