Cybersecurity leader with over 14 years of IT experience, including 7+ years specialising in Information Security, Security Operations and Cybersecurity Consulting. I combine deep technical expertise with a strategic mindset to help organisations strengthen their security posture, reduce risk and protect business continuity.

Based in Dublin, Ireland, I lead cybersecurity initiatives across enterprise and multi-tenant environments, aligning security strategy with business objectives so that technical decisions translate into measurable value for clients and stakeholders. My expertise spans Security Operations, Incident Response, Vulnerability Management, Penetration Testing, Threat Detection & Response, Security Architecture, EDR/XDR and Cybersecurity Strategy — applied across Private, Public and Hybrid Cloud, with alignment to NIST CSF, ISO 27001 and MITRE ATT&CK.

Throughout my career I have led programmes spanning SOC development, EDR/XDR deployments, vulnerability remediation, offensive security engagements and cloud security initiatives, translating complex technical findings into clear, actionable insight for both engineering teams and executive stakeholders — ensuring security investments deliver tangible business outcomes.

Kiteworks & Citrix Incidents Show Challenges of Zero-Day Response
One company told customers to power down its data-protection platform during a nine-hour window, while the other remained mum on reported attacks…
_{Dark Reading}

SWIFT Banking & Government Middleware Enables RCE
Patch middleware vulnerabilities now to avoid hardware-based MFA exploits in ultra-sensitive environments.
_{Dark Reading}

GitLab warns of critical RCE vulnerability in AI Gateway service
GitLab warned customers today to immediately patch a critical AI Gateway vulnerability that could let attackers run arbitrary commands on vulnerable…
_{BleepingComputer}

Is Your Organization Ready for 2027's AI Accountability Era?
Organizations may face an artificial intelligence (AI) reckoning over the next year. Omdia and Gartner weigh in on how to tackle the governance…
_{Dark Reading}

Is It Fair to Blame 'Rogue' AI for Security Failures?
"Rogue AI" terminology anthropomorphizes LLMs and shifts risk responsibility from vendors. Defenders should treat agents as untrusted…
_{Dark Reading}

US sanctions Tren de Aragua gang members in ATM hacks crackdown
The U.S. Treasury Department has sanctioned eight members of the Venezuelan gang Tren de Aragua (TdA) for their role in the theft of millions of…
_{BleepingComputer}

In Other News: $15K iCloud Spoofing Bugs, AI Policy Experts Phished, Adblocker Spies on AI Chats
Noteworthy stories that might have slipped under the radar: Kiteworks patches over 100 vulnerabilities, Microsoft publishes 2026 Digital Defense…
_SecurityWeek

Mississippi mayor says ransomware incident led city to shut down systems
Government services were temporarily disrupted by ransomware in Vicksburg, Mississippi. Mayor Willis Thompson said the FBI and other authorities are…
_{The Record}

_{Auto-updated every 6 hours from The Hacker News, BleepingComputer, Krebs on Security, Dark Reading, SecurityWeek, The Record and CISA advisories. Headlines link to the original source.}

Engagement approach: Reconnaissance → Assessment → Exploitation → Post-exploitation → Detection review (purple-team) → Technical & executive reporting

I treat security as a business function: every technical decision is measured by the value it creates, the risk it removes and the efficiency it adds.

• Translate complex technical findings into clear, executive-level insight that shows where security investment delivers the most return.
• Build and mature Security Operations Centre (SOC) capability, giving the business continuous visibility and faster detection.
• Lead offensive security engagements (penetration testing) that surface real weaknesses before attackers can exploit them.
• Support pre-sales and customer workshops, positioning security as an enabler of new business rather than a blocker.
• Mentor security teams, compounding capability across the whole organisation.

• Run risk-based vulnerability management — prioritising remediation by real exploitability and business impact, not raw scores.
• Lead threat detection, incident response and threat-intelligence analysis to contain issues quickly and limit impact.
• Review and approve security architectures before production, catching risk at design time.
• Enforce identity and access controls and least-privilege access across environments.
• Align delivery to NIST CSF and ISO 27001, sustaining certifications and audit readiness.

• Engineer SIEM correlation rules, use cases and dashboards (FortiSIEM) that cut alert fatigue and speed up triage.
• Standardise monitoring, detection and remediation into repeatable processes and playbooks.
• Centralise and consolidate tooling (EDR/XDR, centralised firewall and log management) to reduce operational overhead.
• Deliver technical, executive and analytical reporting that keeps stakeholders aligned and reduces rework.

Tip: add measurable outcomes as you quantify them — reduction in mean time to detect/respond, vulnerabilities remediated, audit findings closed. Real numbers make this section land hardest.

_{March 2019 – Present · 7+ years · Managed security and cloud services provider}

Lead Cybersecurity Engineer — March 2026 – Present · Dublin, Ireland (Remote)

• Lead technical cybersecurity initiatives across managed security and cloud environments, supporting Private, Public and Hybrid Cloud customers
• Lead penetration testing engagements across infrastructure, network and web application environments
• Design, implement and manage EDR/XDR solutions, including CrowdStrike Falcon
• Provide Level 3 technical support and escalation for security incidents and complex projects
• Lead incident response investigations and threat analysis activities
• Perform vulnerability assessments, risk analysis and remediation planning; support the design of SOC capabilities
• Review and approve security architectures for customer projects
• Deliver executive and technical security reports and provide technical mentoring to security teams
• Ensure alignment with NIST CSF, MITRE ATT&CK, OWASP and ISO 27001

Senior Cybersecurity Analyst — September 2024 – March 2026 · São Paulo, Brazil (Hybrid)

• Led security operations, threat detection and vulnerability management across managed customer environments
• Conducted Proof of Concepts and technical evaluations of cybersecurity solutions; managed EDR, MDR and XDR platforms
• Designed and deployed firewalls, IDS/IPS, WAF and DDoS protection solutions
• Built SIEM use cases, correlation rules and monitoring dashboards
• Investigated security incidents, coordinated response actions and supported ISO 27001 governance initiatives

Cybersecurity Engineer — June 2021 – September 2024 · Brazil (Hybrid)

• Designed and implemented secure network and cybersecurity architectures, from project initiation through production deployment
• Deployed and managed firewalls, IDS/IPS, WAF, Web Filtering and Application Control solutions
• Implemented centralised log management and SIEM integrations
• Developed and enforced security policies using FortiManager
• Supported pre-sales teams in customer workshops and technical demonstrations

_{July 2015 – March 2019 · 3 years 9 months}

Platforms and tools I operate in production and assessment environments.

Open resources I build and maintain.

Certifications

Education

• Postgraduate Degree, Cybersecurity — Instituto Daryus (2023 – 2024)
• Bachelor's Degree, Information Security Management — UNINOVE (2018 – 2021)

_{All techniques and tooling are used exclusively in authorised engagements.}