Cybersecurity Professional & DevSecOps Engineer
14 years securing infrastructure — from 5G networks to cloud-native CI/CD pipelines. I understand how systems are attacked because I spent a decade defending them, and I understand how they are built because I now build them.
Approach
Map risks before writing a line of config. Threat modelling, ITGC testing, and compliance alignment first — implementation second. Clarity prevents expensive rework.
Infrastructure as code, CI/CD pipelines, and security embedded from the first commit — not bolted on later. Least-privilege IAM, secrets management, and reproducible environments by default.
Production-grade, version-controlled, and handed over clean — with architecture diagrams, runbooks, and audit trails that outlast the engagement.
Selected Work
Production-grade work across DevSecOps, cloud security, and automation — built, broken, fixed, and documented.
Deployed Wazuh SIEM on AWS using Terraform — automated malware detection integrated with VirusTotal threat intelligence API. Agentic AI workflow used to orchestrate the build, security review, and remediation pipeline. End-to-end automated threat detection from file event to enriched alert.
Python pipeline monitoring auth logs in real time — extracts attacker IPs, queries AbuseIPDB for threat intelligence, calculates CRITICAL/HIGH/MEDIUM threat levels, and fires Slack alerts in under 10 seconds.
Two-pipeline deployment separating infrastructure (Terraform) from application (Ansible). SPN auth, Azure Secure Files, variable groups for secrets, NSG network isolation. Zero secrets in code.
High-availability 3-tier AWS architecture using security group chaining. Each tier only reachable from the tier directly above it. Database unreachable from internet and from the frontend layer.
Docker Compose stack with two isolated networks — app_network and db_network. MySQL port 3306 never mapped to host. Three real security bugs discovered and fixed during build.
4-stage pipeline with private IP SSH (hairpin NAT fix), passwordless sudoers scoped to specific commands only, and CI=true enforcement preventing silent test failures.
Technical Stack
Hands-on experience across security, cloud, DevOps, and enterprise IT — applied in real projects and professional environments across 14 years.
Certifications
Writing & Research
Real projects. Real failures. Real lessons. Written for engineers — readable by anyone.
Background
Fourteen years in network infrastructure at Huawei and MTN gave me something most cybersecurity professionals don't have — I have actually built the systems I now secure. I have configured the VLANs, deployed the 5G cells, and written the firewall rules. I understand how things break because I watched them break at scale, in production, at 2am.
I moved into cybersecurity analysis at CyBlack and the University of Aberdeen — conducting vulnerability assessments, building risk control matrices, leading tabletop exercises, and supporting ISO 27001 recertification with zero major findings. My CISA certification and MSc in Cybersecurity formalised what years of operational experience had already taught me.
I am now a DevSecOps Engineer — building CI/CD pipelines, containerised deployments, Kubernetes clusters, and automated threat detection systems. I write about what I build, break, and fix. The goal is the same it has always been: make systems harder to attack by understanding them from the inside.
Career Timeline
Get in Touch
Senior DevSecOps Engineer · Security Architect · Cybersecurity Consultant
UK / Remote / Global — if you need someone who bridges 14 years of security expertise with hands-on engineering, let's talk.
Curriculum Vitae