based in NL · available remotely worldwide
$ detect --threats --respond
// about
Cybersecurity professional with 7+ years of experience across security operations, endpoint and email protection, and governance, risk & compliance. I design and run defences that fit the way your organisation actually works.
// services
Risk- and compliance-based assessments against recognised frameworks such as ISO 27001, NIST CSF, DORA and NIS2. You learn where you stand and what matters most, and you get a prioritised roadmap to close the gaps.
End-to-end projects that take a security capability from architecture to production: XDR, SIEM/SOAR, email security or mobile threat defence, across hybrid-cloud environments.
Ongoing guidance and hands-on help for your team, from architecture reviews and detection tuning to a trusted second opinion on the hard calls.
// expertise
SOC operations, alert triage, detection engineering and incident response — spotting malicious activity early and containing it fast.
Deploying, tuning and operating EDR to protect laptops, servers and mobile devices against modern attacks.
Defending the number-one attack vector: phishing, business email compromise, and malicious attachments and links.
Mapping controls to recognised frameworks, assessing risk, and turning compliance requirements into practical security.
// toolkit
Security standards
EU regulation
AI governance
// certifications
// notable project
Banking · Netherlands
Designed the Mobile Threat Defence (MTD) solution for a large Dutch bank, extending the bank's security coverage to the mobile devices its people rely on every day.
// writing
// faq
Organisations of every size, from small and medium-sized enterprises to large multinational enterprises. The approach scales to your size, maturity and budget.
Both. Most work can be delivered remotely from anywhere in the world, and I’m happy to work on-site when an engagement calls for it.
With a conversation. Send me a message on LinkedIn with a short description of your challenge, and we’ll set up a call to explore scope, goals and timelines.
Yes. I have implemented an ISO 27001 information security management system (ISMS), and that experience carries over to other frameworks and regulations such as DORA, NIS2 and the NIST CSF. I study each one in the context of your organisation, so the controls fit how you actually operate.
That depends on what an initial assessment and gap analysis show. Often the best result comes from getting more out of the tools you already have. Where there are genuine gaps, I’ll recommend options that fit your environment and budget.
Both. Engagements can be a defined, short-term project such as an assessment or implementation, or ongoing advisory and support, whichever suits your needs.
Confidentiality is fundamental to my work. I’m glad to sign NDAs and any other confidentiality agreements you require. When a project ends, I securely delete any data collected during it that is confidential, sensitive or covered by the GDPR.
I fully cover European and African time zones. For clients in the Americas, I prefer US Eastern or Central time.
Pricing depends on the scope, duration and type of engagement. Get in touch and we can discuss an arrangement that works for you.
// contact
Need an assessment, a security capability designed and built, or an expert on call? I'm based in the Netherlands and work remotely with clients worldwide. Send me a message on LinkedIn.
Message me on LinkedIn