Security Engineering
Secure by design. Scalable by default.
🛡️ Threat modeling & risk assessments
📋 Compliance readiness (ISO27001, PCI-DSS)
🔐 Secrets & identity management automation
🚨 Incident response & breach readiness
📈 Vulnerability lifecycle management
🧪 Security testing integration (DAST/SAST)
🧰 Secure development lifecycle (S-SDLC)
🔍 Supply chain & third-party risk review
🧵 Attack surface monitoring & alerting
🔧 Developer enablement & training
ScotAccount Identity Platform
Led the security architecture and incident readiness for Scotland’s digital identity system. Embedded threat modeling, secure coding practices, and secrets automation across services.
PCI-DSS Secure Mobile App
Architected the security controls for a mobile payment platform, including TLS pinning, Vault integration, network hardening, and pipeline enforcement in a regulated environment.
Secrets Rotation at Scale
Built and deployed AWS Secrets Manager-based rotation pipelines, integrated with Terraform and GitHub Actions. Supported zero-downtime deployments and audit trail validation.
Vulnerability Management Pipeline
Automated vulnerability scanning using Trivy, Snyk, and GitHub Dependabot. Prioritized alerting and remediation with custom Slack integration and JIRA ticketing.
🔐 HashiCorp Vault / AWS Secrets Manager
🔍 Trivy / Snyk / Checkov / Dependabot
⚙️ GitHub Actions / Terraform / Terragrunt
📦 OIDC / Auth0 / Cognito
🧠 SPDA / OWASP / NCSC guidance
📈 Prometheus / Grafana / CloudWatch
🚦 AWS WAF / GuardDuty / Inspector
📊 JIRA / Notion / Slack integrations
🧪 K6 / DAST pipelines
🧰 Custom Confluence security patterns
Need Security Leadership?
From secure development pipelines to compliance strategy — Cipherer helps you ship fast, stay secure, and sleep well.
Get In Touch