Vulnerability Management & Remediation
Scanning and analysis with Nessus, OpenVAS, and Nmap.
Remediation planning, risk prioritisation, and detailed reporting across large estates.
Patch Management Solutions
Design and deployment of SCCM and WSUS for enterprise environments.
Security update lifecycle management, rollback procedures, and compliance reporting.
Endpoint Protection & Encryption
Enterprise rollouts with Symantec, Trend Micro, McAfee ePO, and legacy Forefront platforms.
End-to-end deployment of endpoint encryption for sensitive data protection.
Infrastructure Hardening & Compliance
Windows Server configuration and hardening.
TLS v1.2 enablement, NTLMv2 migration, and anti-malware baselining.
SIEM Onboarding & Security Monitoring
Onboarding of applications, services, and devices into enterprise SIEM platforms.
Practical experience with Elastic Stack (Elasticsearch, Logstash, Beats, Kibana) and Kubernetes.
Configuration of log collection agents (Beats, syslog/rsyslog) with TLS/mTLS encryption.
Development and testing of security use cases, triggers, and playbooks.
Stakeholder engagement, workflow documentation, and audit-ready processes.
Incident Response & Business Continuity
24/7 major incident and P1/P2 response.
Root cause analysis, preventative controls, and lessons-learned reporting.
Disaster recovery planning and off-site VPN deployments.
Project Delivery & Documentation
Security readiness assessments and infrastructure audits.
High-level design documentation, process improvement, and best-practice frameworks.
Knowledge transfer and training for internal teams.
