Cyber Security Architect. Independent B2B contractor, available to consulting partners, systems integrators and staffing agencies. Europe-based, working across global time zones.
Four situations, roughly. Each one is a requirement that needs covering this quarter — not a conversation about next year's roadmap.
Senior security profile, remote, short notice, empty shortlist. I onboard in days rather than weeks — VAT registered, insured, documents and references ready before you ask for them.
XDR or SIEM platform work, an identity build, a vulnerability programme. Delivered under your brand, to your client, documented, with a clean handover. You keep the relationship.
Agent coverage gaps, policies nobody maintains, alerts nobody reads, a migration stuck at sixty percent. I take the platform, find where it stopped, and get it to production.
NIS2, DORA, ISO 27001, IEC 62443, the EU Cyber Resilience Act. Gap analysis, control mapping and artefacts an assessor will accept — not a slide deck.
Everything your onboarding process will ask for, in one place — so “can we use him” takes five minutes instead of five emails.
IT 02959810819Held continuously and renewed annually. Certificate supplied on request, before contract signature. This is usually where an individual contractor stalls in vendor onboarding.
Target architectures, control baselines, segmentation and secure-by-design review across hybrid and cloud estates.
Zero Trust · defence-in-depth · security baseline design · threat modelling · IT/OT segregation · platform lifecycle · production readiness
Ownership of EDR/XDR and SIEM platforms end to end: assessment, policy lifecycle, staged rollout, telemetry validation, stabilisation.
Trend Micro Vision One · Deep Security · Apex Central · Microsoft Defender · IBM QRadar · Sentinel · Splunk · Wazuh · detection engineering
Identity architecture, authentication modernisation, access governance and privileged access controls.
Microsoft Entra ID · Active Directory · CyberArk PAM · Conditional Access · SAML / OAuth 2.0 / OIDC · RBAC · JIT access · access reviews
Asset visibility, risk-based prioritisation, remediation ownership and SLA reporting across infrastructure, cloud and endpoints.
Qualys VMDR · CSAM · Cloud Agent · Qualys EDR · PCI · Nessus · OpenVAS — all Qualys modules certified
Gap analysis, control mapping, evidence preparation and audit support — producing artefacts an assessor will accept.
ISO/IEC 27001 · NIS2 · DORA · EU Cyber Resilience Act · IEC 62443 · NIST CSF · NIST SP 800-82 · GDPR · PCI DSS · DR & BC
Secure SDLC, threat modelling, dependency hygiene and software supply-chain considerations alongside development teams.
OWASP Top 10 · Secure SDLC · SAST / DAST / SCA · CVE triage · SBOM · CI/CD security · secrets management · Docker · Kubernetes
Locally hosted, isolated AI workloads for vulnerability triage, reporting and evidence preparation — with access control, logging and human validation.
Ollama · Hugging Face · containerised local models · no external APIs · data residency enforced · human-in-the-loop
Roadmaps, change governance, KPI and SLA monitoring, vendor coordination and operational handover.
ITIL · Jira ITSM · incident, change and problem management · risk communication · stakeholder reporting
Hands-on and in production, in regulated environments. Listed in full so you can keyword-match against a requirement without having to email and ask.
All product and company names are trademarks or registered trademarks of their respective owners. They appear here to describe working experience only, and imply no partnership, endorsement, reseller relationship or vendor certification beyond those listed under Certifications.
Concurrent B2B engagements across security architecture, identity, vulnerability and exposure management, endpoint/XDR platform governance, security operations and operational resilience. Sectors include critical infrastructure and regulated financial services — among them a target identity environment built from the ground up, with its own security guardrails and access-control baseline. Delivered directly and through consulting partners.
Enterprise security platform operations across EDR, SIEM, vulnerability management, IAM/PAM, SASE, network security and Microsoft security, inside a NIS2, DORA and ISO 27001 programme. Hardened local AI workloads with enforced data residency, network isolation and human-supervised outputs.
Built the security capability from zero over six years: SOC and detection, network security, identity, incident response, disaster recovery and business continuity. GDPR safeguards for clinical and medical-device data.
Firewall, VPN, IDS/IPS and host-based monitoring for business-critical systems. Vulnerability assessment, security audits, patch management, backup and disaster recovery.
Send the requirement, the client sector and the expected duration. You get a yes or a no within one working day — including a no, with the reason. If you need to send a spec sheet or an attachment, message me on LinkedIn.