Contact
Strong security is a decision. Make it before an attacker makes it for you.
Every organisation eventually pays for security — either deliberately, on engineering done well, or all at once, during an incident. I help you pay the smaller bill: enterprise security operations at cloud scale, front-line incident response for clients from SMEs to global enterprises, CISSP, GSEC, and OCI Security certified, with measurable results — 75% fewer false positives, ~60% faster detection, and investigations that end in decisions, not open questions.
Engagements
What a conversation could cover.
Detection engineering
Detections that actually fire — built as code, tested in CI, mapped to MITRE ATT&CK, and tuned against your real telemetry rather than vendor defaults.
Incident response
Calm, methodical investigation when something has gone wrong: containment guidance, forensic analysis with evidential integrity, and reporting your board can act on.
Cloud security
IAM, logging, and detection architecture across OCI, AWS, and Azure — hardening that strengthens your posture without slowing your engineers down.
Advisory & assessments
Risk assessments and control reviews aligned with NIST and ISO 27001, with findings prioritised by what an attacker would actually do.
Next Step
One email starts it.
Send a short note about what you are facing — a gap you suspect, a project you are scoping, or an incident you are dealing with. You will get a straight answer: what I would do, whether I am the right person for it, and if not, what I would look for in whoever is.
mansour@jalaly.com · London, United Kingdom