Consulting
Security consulting for cloud & AI
I help engineering and security teams find real risk and fix it. We do that without slowing down the roadmap. Two core practice areas:
CISSPCertified Information Systems Security Professional
CCSPCertified Cloud Security Professional
AWS Security SpecialistAWS certified security specialty
PhD Candidatezero-trust for post-quantum satellite comms
10+ yrsin security engineering & consulting
☁️
Cloud Security
I secure cloud estates on AWS, Azure, and GCP. Scope runs from identity to data.
- Cloud security posture & configuration review
- IAM and least-privilege design
- Network segmentation & data protection
- Secrets management and key rotation
- Detection, logging & incident readiness
- Compliance mapping (SOC 2, ISO 27001, CIS)
🤖
AI Security
I secure AI and LLM systems. The focus is the threats a traditional appsec checklist misses.
- LLM application threat modeling
- Prompt injection & jailbreak defenses
- RAG pipeline & data-leakage review
- Tool/agent permission hardening
- Model & supply-chain risk assessment
- AI governance & responsible-use guardrails
How engagements work
1
Scope
A short call, so I understand your stack, the risks, and the goals.
2
Assess
Hands-on review. Findings come back prioritized, and they stay practical.
3
Harden
Remediation guidance your team can act on, and support while you do the work.
Got a project in mind?
Book a free 30-minute intro call to talk about securing your cloud or AI systems.