- Role
- Consultant; Head of Security from 2024
- Context
- Client companies must demonstrate their security to customers and auditors, across many cloud and SaaS providers.
- Scope of work
- Ran backend technology operations and client compliance programmes: ISO, SOC 2, HIPAA and GDPR.
- Built audit tooling for AWS, GCP, Azure, GitHub, GitLab, Cloudflare and other providers, with remediation guidance.
- Built a real-time SIEM that alerts on suspicious activity in AWS and Azure.
- Built Congruid, a Slack bot for time-limited, least-privilege AWS access.
- Set up disaster recovery for clients, and cut GraphQL query times from tens of seconds to milliseconds.
- Stack
- AWS, GCP, Azure, GraphQL, Slack, TypeScript