Security Engineering and Consulting
Product security and AWS cloud security, for teams that need senior judgment without a full-time hire. AI-assisted security research and testing, secure development practices, and AWS control-plane security design and review.
what's covered
Hands-on research and testing, heavily AI-assisted. Every finding is verified by hand before it reaches you.
Threat modeling, secure SDLC, and architecture and code review, so problems get caught early instead of late.
Account structure, SCPs, and IAM guardrails across the organization. Reviewed, consulted on, or designed from scratch.
Keeping the lights on so the security program keeps running. The routine checks and upkeep that stop it drifting.
about
Security engineering and consulting across product security and AWS cloud security, from design through to testing. Work happens close to the engineering and security teams involved, without adding another layer of headcount.
AI tooling is used heavily in testing and review work, with every result verified by hand. Research continues into the risks agentic AI introduces to the software supply chain.
A standing retainer for one anchor client. Embedded enough to know the codebase, without full-time headcount.
One scoped problem, clear start and end. A review, a rollout, a threat model, a pen test.
contact
A short description of the problem is enough to start. Expect a reply within a couple of days.