Security & quality engineering

London, UK

Leading the DevSecOps practice — embedding security across the SDLC: application security, vulnerability management, CI/CD and supply-chain hardening, and getting ahead of emerging AI-related risk.

• DevSecOps
• AppSec
• Vuln Management
• CI/CD

Contract

Short contract focused on penetration testing and assessing REST API security.

• Penetration Testing
• REST APIs
• Contract

Chelmsford, UK

Single-handedly rolled out a new global security testing process conforming to ISO 27001 — integrated with the IMS and automated web scanners so every web application in the business could be sufficiently security-tested and reported. Worked closely with infrastructure and development teams to get vulnerabilities mitigated promptly.

• AppSec
• ISO 27001
• Web Scanning
• Vuln Management

Chelmsford, UK

Automated a large portion of regression testing with TestComplete. Security testing with OWASP ZAP & Burp Suite to audit applications before release, plus manual and API testing with ReadyAPI and Postman.

• Test Automation
• OWASP ZAP
• Burp Suite
• API Testing

Greater Ipswich · Contract

BAU and project test work — writing test plans across work streams, estimating and prioritising, manual testing and defect raising, then handing SIT over to UAT. Across smart-metering tech, APIs, and customer billing platforms.

• Test Planning
• Manual Testing
• APIs
• Contract

Chelmsford, UK

Wrote and maintained test scripts, plans, and strategies across functional, regression, and performance testing using a range of test methodologies.

• QA
• Functional Testing
• Regression
• Performance