Who I Am
I'm a Senior Security Engineer with over 8 years of experience designing and deploying privileged access management and identity security solutions across enterprise environments. At CyberArk, I help organisations eliminate standing privileges, enforce least-privilege access, and respond to identity-based threats before they become breaches.
I thrive at the intersection of security architecture and hands-on engineering — whether that means designing a PAM rollout for a Fortune 500 bank, scripting a custom connector for a legacy system, or helping a cloud team adopt just-in-time access without slowing down their CI/CD pipeline.
Professional Experience
Senior Security Engineer
- Led PAM architecture and deployment for 12 enterprise clients across APAC, reducing privileged credential exposure by 94%.
- Designed and implemented Secrets Hub integrations connecting CyberArk Vault to AWS Secrets Manager and Azure Key Vault for cloud-native workloads.
- Built custom CyberArk Conjur connectors for Kubernetes and Jenkins pipelines, eliminating hardcoded secrets in 3 production CI/CD environments.
- Delivered pre-sales technical workshops and proof-of-concept deployments, contributing to $4M in new ARR.
Security Analyst
- Managed SOC operations and incident response across a hybrid cloud environment, achieving mean time to respond of under 15 minutes.
- Implemented SIEM rules and playbooks in Microsoft Sentinel reducing false positives by 60%.
- Conducted quarterly vulnerability assessments and penetration tests across internal infrastructure.
- Mentored two junior analysts and contributed to the team's AWS Security certification program.
Skills & Technologies
Identity & Security
Cloud & Infrastructure
Languages & Tools
Academic Background
Bachelor of Engineering (Computer Science)
University Name
Certifications
Projects & Interests
Self-hosted CyberArk sandbox running on Proxmox. Used to test new PAM features, practice Conjur integrations, and break things safely before doing it in prod.
Python CLI that scans Git repos for hardcoded secrets and suggests Conjur migration paths. Presented at an internal CyberArk hackathon and open-sourced.