I work on security testing and compliance assessments.
Most recently Consultant III, Technology Audit at Protiviti.
Security testing and compliance. For the last few years I've worked on testing and audit engagements in India and the Middle East.
That has included compliance and gap assessments, IT general controls testing, cloud and network security reviews, and vulnerability assessments and penetration tests, usually against frameworks like ISO 27001, NIST, CIS and UAE IA.
I aim to present findings in a way that is clear and actionable for both technical teams and management.
Tools and frameworks I've used on engagements.
A university project that was published at IEEE ICOECA 2024. More of my code is on GitHub.
A DevSecOps approach that embeds OPA in the CI/CD pipeline to validate AWS CloudFormation templates against security policy, blocking non-compliant infrastructure before it is deployed.
IEEE · ICOECA 2024 Read the paper ↗Technology risk and security assurance engagements.
2025Junior Penetration Tester
2025Certified Cloud Associate
2024Multi-Cloud Network Associate
2024Certified in Cybersecurity
If something here helped you, a coffee is always appreciated.
Buy me a coffee ↗Opens buymeacoffee.com/heisenberg02, where you can pick an amount and leave a note.
White to move and mate in two. Black replies automatically.