Cyber expert specialising in Azure Security Services.
- $10k+
- Earned
- 4x
- Hired
- 5.0
- Rating
- 25
- Followers
Cyber expert specialising in Azure Security Services.
Design Partner for B2B SaaS, Cybersecurity & Defense
![Cover image for Infrastructure security hero concept [alternative version]](https://media.contra.com/image/upload/q_auto:good,w_800/yh8uimqktdzkvjkzdjjw.avif)
Cybersecurity GRC Consultant | Ex-Accenture
Business Analyst for a Government client on behalf of Accenture. Supported the delivery of a data warehouse programme aimed at centralising data, improving reporting capabilities and enabling data-driven decision-making across multiple departments. Worked closely with business and technical stakeholders to define data requirements and ensure alignment with strategic objectives.
My duties included the following:
▪ Led requirement gathering activities to capture data, reporting, and analytics needs through stakeholder interviews, workshops, and process analysis.
▪ Facilitated workshops with business users, data engineers and architects to define data sources, data flows and reporting requirements.
▪ Produced detailed documentation including business requirements documents (BRDs), data requirements, data mapping specifications, and user stories.
▪ Collaborated with technical teams to translate business needs into data models, ensuring clarity on data definitions, transformations, and quality rules.
▪ Translated business needs into structured user stories and acceptance criteria, supporting agile delivery and ensuring traceability from requirements through to implementation.
▪ Managed RAID logs and supported programme governance by tracking risks, dependencies, and data-related issues.
▪ Supported UAT by defining acceptance criteria, validating outputs, and ensuring delivered data aligned with business expectations.
Key outcomes included:
Key outcomes included:
▪ Delivered clearly defined data and reporting requirements, enabling the successful design and implementation of the data warehouse.
▪ Improved data consistency and trust by standardising data definitions and aligning stakeholders on a single source of truth.
▪ Strengthened delivery alignment by linking use cases and user stories directly to technical outputs, reducing ambiguity and rework.
1
2
315
Cybersecurity Project Manager for a UK Government client on behalf of Accenture.
My duties included the following:
▪ Led key projects aligned with the client's strategic goals, showcasing project leadership and strategic alignment capabilities.
▪ Successfully led and managed three major projects, ensuring they met important client milestones and demonstrated effective project coordination and management skills.
▪ Prepared critical documents necessary for the delivery and completion of program milestones, evidencing meticulous organizational skills and attention to detail.
▪ Actively steered discussions with project directors and stakeholders, showcasing skills in strategic communication and influence at senior management levels.
▪ Worked in close collaboration with senior stakeholders, ensuring alignment with strategic goals and successful achievement of key program milestones, reflecting a strong capacity for teamwork and stakeholder management.
Key outcomes included:
▪ Successfully delivered three major cybersecurity projects simultaneously for a UK Government client, demonstrating the ability to manage complexity, competing priorities and high-stakes deadlines in a regulated environment.
▪ Ensured all projects met critical client milestones, directly contributing to programme progression and client confidence in delivery.
▪ Produced critical programme documentation that underpinned milestone delivery, ensuring governance, accountability and audit trails were maintained to the standard expected of a UK Government engagement.
2
506
Technical Writing for a major Retail client that was on the verge of going Public on behalf of Accenture. Working with the Cybersecurity Programme Manager to unify and capture the deployment of several cybersecurity tools (Tanium, Crowdstrike, Tenable) across 120+ organisations.
My duties included the following:
▪ Supported the programme lead by documenting all SOPs, policies and standards as required by the Cyber team.
▪ Conducted business requirement gathering sessions to develop subsequent documentation such as skills matrix, roles and responsibilities, RACIs and RAID logs.
▪ Supported on project management tasks such as maintaining the RAID logs, overseeing cyber tool deployment and updated status reports.
Key outcomes included:
▪ Created a documentation foundation that the team could operate from independently, reducing reliance on tribal knowledge.
▪ Translated stakeholder needs into structured deliverables — moving from raw requirements to tangible outputs like skills matrices, RACIs, and roles & responsibilities.
▪ Supported successful cyber tool deployment by providing oversight and coordination, contributing to the programme's technical execution.
1
221
Cybersecurity Strategy Consulting and Project Management for an airline that was in its start-up phase in the Middle East on behalf of Accenture.
My duties included the following:
- Leading the Cyber GRC project to build the cybersecurity function for an aviation client, filling a critical security gap and laying groundwork for sustained cyber resilience.
- Developing and implementing a cybersecurity strategy and roadmap aligned with ISO 27001 and region-specific regulations.
- Executing a specialised threat profiling exercise, developing a unique threat landscape and identifying risks and vulnerabilities specific to the aviation sector.
- Creating a detailed cybersecurity strategy and roadmap with an executive summary, ensuring alignment with client objectives and clarity for C-suite stakeholders.
Key outcomes included:
- Established a cybersecurity function from the ground up, giving the client a formal security posture where none previously existed.
- Reduced organisational risk exposure by identifying aviation-specific threats before they could be exploited.
- Positioned the client for long-term cyber resilience rather than reactive, ad hoc security responses.
1
229
AI Agent Security Auditor | Fast, evidence-based reviews
I recently completed a security hardening pass on an AI-enabled mobile product.
The most important issues weren’t exotic vulnerabilities.
They were practical deployment risks:
password reset race conditions
missing abuse controls
weak retention guarantees
mobile backup exposure
logging and CI gaps
Each confirmed finding was fixed and backed by regression tests before the security baseline was marked PASS.
One lesson stood out: security reviews are most useful when they produce evidence and actionable fixes, not just scanner output.
I’m now offering focused 24-hour AI Agent Security Mini-Audits for founders and small teams.
https://contra.com/s/2Z7YgYXU-ai-agent-security-mini-audit?r=guillaume_strohecker_6m06cchc
0
56
Mobile Security & Privacy Hardening
Security hardening focused on mobile platform protections and privacy-preserving behavior.
Android application backup was disabled to reduce risk around locally stored session material, and release builds were hardened to block cleartext traffic while keeping local development support isolated to debug/profile builds.
The review also verified that BLE remains anonymous, one-sided interest stays private, precise coordinates are not exposed publicly, and Social Heat remains aggregate and threshold-gated.
0
27
API Rate Limiting & Abuse Protection
Security hardening focused on API abuse resistance.
Rate limits were added to registration, login, password-reset request and confirmation, Click Intent creation, and public Heat reads.
The limiter was designed with bounded state, explicit email normalization, case-sensitive reset-token fingerprints, expiry sweeping, and fail-closed behavior under saturation. Regression tests verified throttling behavior and recovery.
0
35
Authentication & Password Reset Hardening
Security hardening focused on authentication and account recovery.
The work included stronger scrypt password hashing, legacy-hash migration, login timing protections, atomic password-reset token consumption, and session revocation after reset.
PostgreSQL concurrency and regression tests verified that a reset token can only be successfully consumed once and that authentication behavior remains safe under failure conditions.
0
41
Helping SaaS teams finish security questionnaires with evide
🌐 Expert Cloud Security Solutions
🌐 Expert Cloud Security Solutions
View more →
Penetration Tester - OSCP 🛡️
Okta & IAM Consultant - SSO, SCIM & Identity Automation
Lifecycle Automation - Onboarding & Offboarding Description: Replaced a manual spreadsheet-based process with a fully automated system using Okta Workflows and API integrations.
0
94
Designed and built a production-ready internal AI support bot from scratch. The system uses a five-layer RAG architecture to ingest and retrieve knowledge from different knowledge sources, e.g. Confluence, Jira, Notion, and Slack, enabling staff to get accurate, source-cited answers to internal queries directly within Slack.
Built entirely on internal infrastructure using the Claude API, Supabase, and pgvector - ensuring zero data exposure outside the organisation. The knowledge base spans 10,000+ entries across 4 data sources, with hybrid retrieval combining semantic search, keyword fallback, and query rewriting for accuracy.
The bot replaced a manual support model, reduced repetitive query handling, and introduced a scalable self-service layer for internal IT support / helpdesk - while resolving the data privacy concerns that had blocked a third-party vendor solution.
0
68
