Identity, PAM & Active Directory Security
IAM, SSO, MFA, PAM, privileged session controls, Active Directory security, and authentication firewall initiatives.
SELECTED CYBERSECURITY DELIVERY
Cybersecurity projects and initiatives in banking.
A high-level overview of project areas from my CV and related security initiatives. My work spans architecture, engineering, technology evaluation, implementation leadership, and delivery governance.
Zero Trust, SSE & SASE
ZTNA, secure remote access, SSE/SASE architecture, CASB, and branch connectivity security.
SOC, SIEM, XDR & XSIAM
Security monitoring, SIEM, XDR, XSIAM evaluation, detection use cases, and response workflow integration.
Network, DNS & Branch Security
Firewall, IPS, DNS security, NAC, network segmentation, and branch security.
Email Security & DLP
Email threat protection, endpoint and Microsoft 365 DLP, policy design, and sensitive data movement controls.
Tokenization & Encryption
Tokenization, file encryption, database encryption, and key management evaluation for sensitive information.
Cloud & Container Security
Cloud posture, identity and entitlement controls, workload protection, and container security.
Application, API & Mobile Security
WAF, API security, mobile application protection, runtime controls, and secure application delivery.
Vulnerability Assessment & Hardening
Vulnerability assessment (VA), patch management, server and endpoint hardening, and security baseline review.
Security Governance & Program Delivery
PoC evaluation, solution selection, implementation planning, access review, and executive reporting.
Project descriptions are intentionally high level. Scope, employers, architecture, control settings, and outcomes are discussed only when appropriate in a professional conversation.