I spent ten years running a business end to end: sales, service, suppliers, people and the reporting that kept it all honest. In 2025 I moved into information security at Codec Networks, and that background shapes how I work. A SOC is an operation. It needs documented procedures, named ownership, consistent investigation and reporting that a client can act on, not a feed of raw alerts.
Today I lead the Managed Security Operations practice and the Centre for Professional Excellence (CoPE), the firm's training arm. Day to day that means SIEM monitoring and tuning across several client environments, incident investigation and escalation, accessibility and configuration audits with evidence that stands up to scrutiny, and building the automation that lets a small team cover more ground. I hold the Microsoft SC-200 and CRTA credentials, so I test detections from the attacker's side as well as the console.
Security operations & detection
Running SIEM-based monitoring for multiple clients: log onboarding, rule tuning, use-case design, alert triage, threat hunting and escalation within agreed responsibilities.
Accessibility & compliance audits
Leading WCAG 2.2 A/AA digital accessibility testing programmes for financial-sector web and mobile applications, from Stage 1 assessment through revalidation to final reports.
Security assessment support
Web security audits, configuration reviews and vulnerability validation, with findings written for the people who have to fix them.
Automation & AI tooling
Designing and building the engines behind the work: alert triage with a local LLM, report generators, evidence capture pipelines and training platforms, all with a human approving every consequential step.