Security team consulting
Get more security out of the team you already have.
I help security leaders find where their team’s time really goes, automate and delegate the work that shouldn’t need them, stop paying for what isn’t pulling its weight, and report security in numbers the business understands.
Fixed-price packages from $1,500 USD. Fully remote.
Sound familiar?
Busy is not the same as effective
Most security teams aren’t short of effort. They’re short of time, focus and a way to prove what they’re worth.
The team is always busy, and the backlog still grows
Senior people spend their days on triage, tickets and reports that could be automated or handed down.
Everything is a priority
Without a clear way to rank the work, the loudest request wins and the important projects keep slipping.
The tools cost more than they return
Overlapping platforms, licences nobody uses, and features you paid for but never switched on.
Leadership asks what security is worth
Vulnerability counts and alert volumes don’t answer that. Budget gets defended with fear instead of facts.
What I do
Four levers, one bigger picture
Every recommendation ties a small, practical change back to what the business needs from security.
Prioritise
A clear, risk-based way to decide what the team works on first, and what it stops doing.
Automate & delegate
Pinpoint the repetitive work eating your team’s hours, then automate it or move it to the right level.
Optimise the investment
Find overlapping tools and underused licences, and put the budget where it actually reduces risk.
Measure what matters
Security metrics that translate into business impact (risk reduced, hours saved, cost avoided), so leadership sees the value.
Packages
Fixed prices, clear deliverables
Every engagement starts with a free 30-minute discovery call, so we agree on scope before you spend anything. All prices in USD.
Security Metrics Quick Start
Show leadership what security is worth, in one week.
$1,500one week
- A working session to map security work to business goals
- 5–8 security metrics tied to business impact
- Where each number comes from, and how to automate collecting it
- A one-page executive dashboard template
- A walkthrough call with you and your leadership
Security Team Efficiency Assessment
Where the time and money go, and a plan to get them back.
$4,500two weeks
- Interviews and a workflow review across the team
- A time map: where hours go, and which work is toil
- Automation and delegation opportunities, ranked by hours saved
- A tool and spend review: overlaps and underused licences
- A prioritised 90-day roadmap
- The Metrics Quick Start, included
- An executive readout of findings
Monthly Advisory
Keep the roadmap and the metrics moving.
$1,500from, per month
- A monthly working session with you or your team
- Roadmap and metrics check-ins
- Email support between sessions
- Help preparing quarterly updates for leadership
- Month to month
Bigger projects, such as implementing the automation or building out the metrics pipeline, are quoted separately after the assessment.
How an engagement works
Step 1
Free discovery call
Thirty minutes on your team, your pressures and what success would look like.
Step 2
Proposal & kick-off
A written scope, timeline and price. Nothing starts until you’ve agreed to it.
Step 3
Assessment
Interviews, workflow and tooling review, and the data you choose to share.
Step 4
Readout & roadmap
Findings, a ranked plan and the metrics to track it, presented to you and your leadership.
Why me
I’m a Lead Information Security Engineer, working on identity and post-quantum security. A large part of my job is exactly this: prioritising the work, delegating it to the right people, spotting where the team is losing time, and automating the processes that slow us down.
I look at the big picture first, then at how each small step moves it. And I build security metrics that leadership can actually use, because they’re tied to business outcomes rather than tool output.
I hold GIAC GSTRT (strategic planning, policy and leadership), GIAC GCIH, AWS Certified Security – Specialty, CompTIA CySA+ and Security+, and I’ve commented on security for Security Magazine, Silicon Republic and Cyber Daily.
Questions
The fixed packages are built for small and mid-size security teams, from a single security lead up to around fifteen people. Larger or multi-team organisations get a custom quote after the discovery call.
Do you need access to our systems?Usually not. Most of the work is interviews, walking through workflows with your team, and reviewing exports you choose to share, such as ticket and alert volumes. Anything beyond that is agreed in writing in the proposal.
Is this remote?Yes. Everything runs over video calls and shared documents, across timezones.
How does payment work?After the discovery call you’ll get a written proposal with the scope, price and payment terms. All prices are in USD.
What if I just want coaching for myself?That’s on the coaching page: one-to-one career coaching, resume reviews and the certification study group.
Let’s find your team’s lost hours.
Book a free 30-minute discovery call. You’ll leave with at least one thing worth fixing, whether or not we work together.