I will ensure that your organization is penetration tested

Yes. I provide consultation on Zero Trust implementation across hybrid environments—reviewing identity, access, segmentation, trust boundaries, and endpoint posture enforcement for Microsoft 365, Azure, AWS, and SaaS apps.

Absolutely. I can assess your current cloud configuration (e.g., IAM, key management, encryption at rest/in transit, logging), review against CIS Benchmarks or ISO 27017, and provide hardening guidance.

I support CI/CD pipeline security, GitHub/GitLab integration, infrastructure as code (IaC) risk controls (Terraform, AWS CloudFormation), and OWASP ASVS/Top 10 integration into automated workflows.

Yes. I have experience with ICS/SCADA environments and can help you design secure network segmentation, harden legacy systems, assess physical access controls, and build OT-specific incident response plans.

I consult across ISO/IEC 27001:2022, NIST CSF 2.0, SP 800-53, HIPAA Security Rule, PCI DSS v4, GDPR (Article 32), NIS2, DORA, and CIS Controls — including deep technical mapping and implementation of Annex A or equivalent safeguards.

Yes. I review configurations, analyze rulebases, optimize zones/policies, and provide best practices for Fortinet, Palo Alto, Cisco ASA/Firepower, Cloudflare WAF, and AWS Shield.

Yes. I can configure and verify proper DNS records, troubleshoot SPF alignment, implement DMARC with reporting, and reduce spoofing risks — especially relevant for Microsoft 365, Google Workspace, and SMTP servers.

Upon request, yes. I provide structured outputs: CLI-level configs, diagrams, cloud policy snapshots, IAM access reviews, or technical remediation plans—depending on the subject of consultation.

Yes. I review the security configuration and governance of SaaS platforms (e.g., Salesforce, HubSpot, Jira, Notion, Dropbox), with focus on roles, access, SSO integration, encryption, and vendor risk.

I can advise on secure coding practices, architecture flaws, or integration risks, but this is not a static/dynamic code review service. For that, I can guide you on tooling (e.g., SAST/DAST) or audit your current findings.