Cybersecurity leader with over 14 years of IT experience, including 7+ years specialising in Information Security, Security Operations and Cybersecurity Consulting. I combine deep technical expertise with a strategic mindset to help organisations strengthen their security posture, reduce risk and protect business continuity.

Based in Dublin, Ireland, I lead cybersecurity initiatives across enterprise and multi-tenant environments, aligning security strategy with business objectives so that technical decisions translate into measurable value for clients and stakeholders. My expertise spans Security Operations, Incident Response, Vulnerability Management, Penetration Testing, Threat Detection & Response, Security Architecture, EDR/XDR and Cybersecurity Strategy — applied across Private, Public and Hybrid Cloud, with alignment to NIST CSF, ISO 27001 and MITRE ATT&CK.

Throughout my career I have led programmes spanning SOC development, EDR/XDR deployments, vulnerability remediation, offensive security engagements and cloud security initiatives, translating complex technical findings into clear, actionable insight for both engineering teams and executive stakeholders — ensuring security investments deliver tangible business outcomes.

Cyber exec arrested in case allegedly tied to ShinyHunters hackers
Canadian cybersecurity executive Edward Dubrovsky has been arrested in Pennsylvania in connection with alleged extortion activity that multiple…
_{BleepingComputer}

ARTEX AI, Claude agents used in cyberattacks on South Korean banks
The cyberattacks that shook the South Korean financial sector earlier this month were launched by a Chinese hacker using the ARTEX AI penetration…
_{BleepingComputer}

Criminal IP Introduces AITEM as the Next Evolution of Attack Surface Management
Traditional attack surface management helps organizations discover exposed assets, but visibility alone is not enough to address threats. Criminal IP…
_{BleepingComputer}

The Third-Party Agent Problem: Why Security Built for AI You Chose Misses the Agents You Didn't
In environments studied for the 2026 State of Agent Security Report, roughly 1,280 third-party products now embed AI. About 282 of them sit behind…
_{The Hacker News}

Insider Cyber Extortion Plot Against Industrial Firm Lands Engineer in Prison
The former core infrastructure engineer deleted admin accounts, reset hundreds of passwords, and demanded 20 bitcoin to spare the company’s servers…
_SecurityWeek

Anthropic Cuts Live Internet Access for Internal AI Tests After Claude Exploits Injection Flaws
Anthropic on Friday said it's cutting off live internet access for all its internal evaluations following the discovery of new incidents in which its…
_{The Hacker News}

FBI Arrests Executive at Ransomware Negotiation Firm
Agents with the Federal Bureau of Investigation (FBI) on Thursday arrested the co-founder of a Canadian cybersecurity firm in connection with an…
_{Krebs on Security}

OpenAI Fires 3 Safety Researchers in Dispute Over AI Risks
The ChatGPT maker said the researchers "violated clear policies on handling sensitive information.” The post OpenAI Fires 3 Safety Researchers in…
_SecurityWeek

_{Auto-updated every 6 hours from The Hacker News, BleepingComputer, Krebs on Security, Dark Reading, SecurityWeek, The Record and CISA advisories. Headlines link to the original source.}

Engagement approach: Reconnaissance → Assessment → Exploitation → Post-exploitation → Detection review (purple-team) → Technical & executive reporting

I treat security as a business function: every technical decision is measured by the value it creates, the risk it removes and the efficiency it adds.

• Translate complex technical findings into clear, executive-level insight that shows where security investment delivers the most return.
• Build and mature Security Operations Centre (SOC) capability, giving the business continuous visibility and faster detection.
• Lead offensive security engagements (penetration testing) that surface real weaknesses before attackers can exploit them.
• Support pre-sales and customer workshops, positioning security as an enabler of new business rather than a blocker.
• Mentor security teams, compounding capability across the whole organisation.

• Run risk-based vulnerability management — prioritising remediation by real exploitability and business impact, not raw scores.
• Lead threat detection, incident response and threat-intelligence analysis to contain issues quickly and limit impact.
• Review and approve security architectures before production, catching risk at design time.
• Enforce identity and access controls and least-privilege access across environments.
• Align delivery to NIST CSF and ISO 27001, sustaining certifications and audit readiness.

• Engineer SIEM correlation rules, use cases and dashboards (FortiSIEM) that cut alert fatigue and speed up triage.
• Standardise monitoring, detection and remediation into repeatable processes and playbooks.
• Centralise and consolidate tooling (EDR/XDR, centralised firewall and log management) to reduce operational overhead.
• Deliver technical, executive and analytical reporting that keeps stakeholders aligned and reduces rework.

Tip: add measurable outcomes as you quantify them — reduction in mean time to detect/respond, vulnerabilities remediated, audit findings closed. Real numbers make this section land hardest.

_{March 2019 – Present · 7+ years · Managed security and cloud services provider}

Lead Cybersecurity Engineer — March 2026 – Present · Dublin, Ireland (Remote)

• Lead technical cybersecurity initiatives across managed security and cloud environments, supporting Private, Public and Hybrid Cloud customers
• Lead penetration testing engagements across infrastructure, network and web application environments
• Design, implement and manage EDR/XDR solutions, including CrowdStrike Falcon
• Provide Level 3 technical support and escalation for security incidents and complex projects
• Lead incident response investigations and threat analysis activities
• Perform vulnerability assessments, risk analysis and remediation planning; support the design of SOC capabilities
• Review and approve security architectures for customer projects
• Deliver executive and technical security reports and provide technical mentoring to security teams
• Ensure alignment with NIST CSF, MITRE ATT&CK, OWASP and ISO 27001

Senior Cybersecurity Analyst — September 2024 – March 2026 · São Paulo, Brazil (Hybrid)

• Led security operations, threat detection and vulnerability management across managed customer environments
• Conducted Proof of Concepts and technical evaluations of cybersecurity solutions; managed EDR, MDR and XDR platforms
• Designed and deployed firewalls, IDS/IPS, WAF and DDoS protection solutions
• Built SIEM use cases, correlation rules and monitoring dashboards
• Investigated security incidents, coordinated response actions and supported ISO 27001 governance initiatives

Cybersecurity Engineer — June 2021 – September 2024 · Brazil (Hybrid)

• Designed and implemented secure network and cybersecurity architectures, from project initiation through production deployment
• Deployed and managed firewalls, IDS/IPS, WAF, Web Filtering and Application Control solutions
• Implemented centralised log management and SIEM integrations
• Developed and enforced security policies using FortiManager
• Supported pre-sales teams in customer workshops and technical demonstrations

_{July 2015 – March 2019 · 3 years 9 months}

Platforms and tools I operate in production and assessment environments.

Open resources I build and maintain.

Certifications

Education

• Postgraduate Degree, Cybersecurity — Instituto Daryus (2023 – 2024)
• Bachelor's Degree, Information Security Management — UNINOVE (2018 – 2021)

_{All techniques and tooling are used exclusively in authorised engagements.}