- Secondment to RAiD (RSAF Agile innovation Digital)

- Led the design and management of DevSecOps pipeline, integrating key security tools into clients' development workflows. This encompassed Secrets Scanning, SCA, SAST, DAST, Container Scanning, and IaC to ensure secure and consistent deployments.- Pioneered and steered Vulnerability Management Program, utilizing a mix of open-source and COTS software to systematically identify, classify, prioritize, and mitigate security vulnerabilities. This entailed persistent monitoring, routine auditing, and timely patching, culminating in reduced risks and bolstered system resilience.- Led and managed Threat Risk Assessments and Threat Modeling, focusing on cloud infrastructure diagrams, as well as web and mobile application designs. This rigorous review process pinpointed potential security risks in digital assets.- Directed and conducted assessments encompassing Penetration Testing, Source Code Review, Cloud Configuration Review, and Web & Mobile Application Testing, along with Security Monitoring, to fortify client security posture.- Provide security advisory services, guiding clients in implementing effective cloud security improvements across AWS, GCP, and Azure platforms.

- Directed and supervised a team of technical consultants in executing Annual Penetration Testing and various technical security assessments, providing hands-on technical mentoring and expert support to address client-related challenges.- Conducted comprehensive security assessments on Web & Mobile Applications, Host Review, Containers Assessment, Cloud Configuration review for GCP AWS Azure, Red Teaming, Kiosk machine testing, Citrix Environment Breakout, Smart Contract Audit, and Source Code review.- Reverse engineered complex application projects, analyzing third-party analytic-based SDKs with End-to-End Encryption in financial mobile applications, ensuring sensitive information is not captured or sent to remote third-party servers, among other advanced security tasks.- Collaborated in the Scope-Of-Work process, working closely with clients to capture detailed requirements, develop comprehensive work plans, and estimate the necessary efforts to deliver high-quality security services.