Experience

Enterprise Organization

Jan 2022 - Present

South Africa

SAST/DAST • SCA • Secrets Management • Threat Modeling • OWASP Top 10 • SBOM Management • Dependency Analysis

Python • Go • C# • JavaScript • TypeScript • Java • Bash • PowerShell • YAML • Azure Templates

SonarQube • Nexus IQ • Prisma Cloud • Semgrep OSS • Artifactory • Checkov • Snyk • Twistlock

GitHub Actions • Azure DevOps • AWS CodeCommit • AWS CodeBuild • Pipeline Hardening

AWS: GuardDuty • Macie • Security Hub • SCP • IAM Access Analyzer • Control Tower | Azure: Defender • Sentinel | Multi-cloud: CSPM

Kubernetes (AKS/EKS/ECS) • Docker • Image Scanning • Runtime Protection

Terraform • OPA (Open Policy Agent) • IaC Scanning • GitOps Security

Cloudflare WAF • Akamai API Security • RASP

Microsoft Sentinel • SIEM Integration • Threat Detection • MITRE ATT&CK Framework

OWASP Top 10 • NIST • CIS Benchmarks

Architected and scaled comprehensive application security program integrating SAST, SCA, secrets scanning, IaC analysis, CI/CD risk assessment, and container security across 4,000+ repositories, embedding security from IDE → VCS/PR → CI/CD pipelines → runtime (AKS/EKS/ECS, hosts) → SOC
Established secure coding standards and best practices aligned with OWASP Top 10 and NIST frameworks, partnering with GRC and Engineering teams for enterprise-wide adoption
Designed and implemented automated PR scanning with zero-touch deployment, eliminating manual security review bottlenecks while maintaining security rigor

Led enterprise vulnerability management program, establishing systematic triage, prioritization, and remediation tracking processes that reduced critical API vulnerabilities to zero using Akamai API Security
Performed ongoing threat modeling and risk assessments for cloud-native applications, developing and implementing mitigation strategies for identified risks
Collaborated directly with 30+ development teams via automated Jira integration, embedding security remediation work into sprint cycles and tracking findings to closure
Provided technical security guidance and support to development teams on complex application security issues, improving secure development adoption
Executed systematic vulnerability campaigns for compliance in non-production and production environments, including enterprise-wide IMDSv2 migration for all EC2 instances and removal of unused IAM users

Integrated security controls throughout CI/CD pipelines using SonarQube, Nexus IQ Lifecycle, Artifactory, Semgrep OSS, and Prisma Cloud with Azure templates for standardization, enforcing security gates at each SDLC stage
Automated repository onboarding and team access to findings workflows using Python scripting, enabling zero-manual-intervention security policy enforcement for new projects
Implemented container and image registry scanning (Trusted Images Framework), preventing vulnerable images from reaching production
Deployed runtime security defenders across AKS/EKS/ECS clusters and host infrastructure, providing continuous security monitoring and threat detection based on the MITRE ATT&CK framework

Configured and managed Cloudflare WAF enterprise deployment, implementing API Shield with OAS-based business logic protection and troubleshooting complex security rules
Enabled Cloud Security Posture Management (CSPM) across all AWS and Azure Landing Zone subscriptions with automated remediation capabilities for continuous compliance
Deployed AI Security Posture Management (AISPM) on Prisma Cloud, securing ML model deployments and AI workloads in Azure AI subscriptions
Integrated Prisma Cloud and Akamai API Security with Microsoft Sentinel for real-time security alerting, improving cloud and application security visibility
Secured infrastructure-as-code deployments through vendor-neutral IaC scanning and OPA policy enforcement across all Terraform configurations

Developed security monitoring and alerting systems by integrating Prisma Cloud, Cloudflare, and Akamai API Security with Microsoft Sentinel and Jira, enhancing security observability across the organization
Partnered with Cyber SOC team for active security incident monitoring and response, adjusting threat intelligence feed configurations to increase alert accuracy and reduce false positives
Monitored security posture using comprehensive tooling including Microsoft Defender for Office 365, Microsoft Cloud Apps, AWS GuardDuty, AWS Macie, and RiskIQ
Established executive-level security dashboards and automated monthly compliance reporting, providing leadership visibility into security metrics, trends, and risk posture

Delivered Security Champion program through secure coding workshops, awareness sessions, and comprehensive documentation, fostering security-first development culture across engineering teams
Conducted technical knowledge-sharing sessions and cross-skilling initiatives to elevate team security maturity and engineering excellence
Provided clear, concise technical communication to both technical and non-technical stakeholders on complex security topics and implementation strategies