"Strategy without tactics is the slowest route to victory. Tactics without strategy is the noise before defeat."
— Sun Tzu
I do security architecture for systems that are hard to reason about, including the agentic ones now reaching production. Twenty-five years across European technology organizations, from building regional security functions and reporting to CEOs through to the production code I still ship. Now available for engagements in the Middle East.
The security problems I get called into are rarely security problems alone. They are architecture decisions with commercial consequences, landing on organizations that have to live with them. I work all three at once.
Security as a structural property, not a control layer bolted on afterwards. Including the systems the AI era is now putting into production.
Security led from the top. Regional organizations built from nothing, and the commercial judgement to know which risks are worth funding.
I build what I design, which is what keeps the architecture honest. A one-person, end-to-end delivery capability that shipped a commercial security platform.
From telecom infrastructure serving millions of subscribers to European aviation systems, from corporate spin-offs to regional security operations, experience that spans the full spectrum of technology leadership challenges.
25+
Years in Technology
Ground-up
Regional Organizations
10M+
Subscribers Served
Multi-agent
Delivery in Production
Threat modeling stalls in shift-left workflows because intent-based interfaces run into an articulation barrier. Staged delegation inside the engineer's editor, backed by specialist agents and a graph-native model, is one resolution.
The Kingdom of Complia defended its castle with the finest compliance framework the medieval world had ever produced. The enemy walked around the back.
A 20-minute podcast covering Dethernety's graph-native architecture, MITRE ATT&CK integration, hybrid AI tiers, and how the platform secures its own infrastructure.
A security architecture that has to hold, an AI system nobody has threat modeled yet, a security function that needs building from nothing. I work where the problem crosses strategy, technology and execution.