Projects

• SAST scanning built into the pipeline

  Automated static analysis on pushes to configured branches. A 90-day rule keeps scan cost down, manual runs always scan, and every finding lands on one dashboard.

  Read the case study
  • CI/CD
  • Static analysis
  • Security dashboard

• Cost dashboard for company-wide generative AI

  Turns AWS Bedrock token usage into per-user spend and sends a Slack alert when someone passes their weekly budget.

  Read the case study
  • AWS Bedrock
  • Databases
  • Slack alerts

• Real-time uptime and disk monitoring

  A live view of application status, disk usage and critical metrics with downtime email alerts, built for a financial services platform.

  Read the case study
  • AWS
  • Monitoring
  • Alerting

Other security work

• Moved public-facing application URLs behind Amazon CloudFront to harden how they are exposed to the internet.
• Run incident response with engineering teams, from triage and containment through remediation.
• Audit employee access to SaaS tools and review AWS and SaaS bills and licences to remove unused access and spend.