More than twenty years across data centre operations, security architecture and OT vulnerability assessment. He has run the estate and he has attacked it.

At Meta

Launched APAC's first regional data centre — built the team and operating model from zero. Proposed and drove the Red Team Operations Global Programme across every global infrastructure touchpoint. Authored the basis for physical security SOPs where none existed in the colocation space. Led digital forensics work that identified timestamp mismatches between production hardware and security camera systems.

At ExpressVPN

Staff Cybersecurity Architect across Core VPN, Core Services, Payments and network operations. Previously Head of Counter-Censorship — identified a TLS 1.3 flaw that raised sustained connectivity by roughly a quarter in the most restricted environments.

Before that

Data centre operations management at GoDaddy (Singapore expansion, Amsterdam, US). A decade of independent security consulting in the UK — authentication infrastructure, firewall estates, centralised logging, business continuity.

Certifications: CISSP (ISC2) · GIAC GSLC, Security Leadership · GIAC GRID, Response and Industrial Defence · Assessing and Exploiting Control Systems and IIoT (Black Hat Asia / InGuardians) · Threat Modeling (Adam Shostack)