CyberEssentia

• Test CyberEssentia's Cyber Scanner, a cloud security posture management (CSPM) product, against Microsoft Entra ID, Microsoft 365, Defender and Azure, working to the master test plan and a rule-by-rule test matrix.
• Built and maintain the QA workbook of rule, functional and website tests. Its bug log holds 35 defects (Critical to Low), each with reproduction steps, evidence and severity.
• Found detection gaps by building insecure configurations in test tenants and rescanning, including unreported over-privileged service principals, a dormant admin account and guest accounts with admin roles.
• Checked scan output against the product's signal-mapping rules (field values, thresholds and logic), uncovering threshold errors and double counting in findings.
• Tested the website's payment flows, finding a Critical refund and cancellation bug and a downgrade failure (HTTP 500).
• Set up and tested connections to AWS, Cloudflare and Google Workspace environments, and logged integration blockers that stopped scans running.
• Produce weekly QA reports for management covering pass, fail, blocked and not-applicable results.

• Full-stack cloud security posture management (CSPM) platform with a rules-based compliance scanner checking CIS and NIST controls across AWS (S3, EC2, IAM, CloudTrail, RDS), Azure and GCP.
• FastAPI (Python) backend and an HTML/CSS/JavaScript frontend showing misconfiguration findings, compliance status and per-resource risk scores.
• Gradient Boosting classifier (scikit-learn, stratified 5-fold CV) predicts non-compliance risk; a RAG pipeline on the Claude API explains violations in plain English and prioritises fixes.

University of Winchester

University of Winchester

• Point of contact for members on inclusivity and wellbeing, keeping the competitive gaming community supportive and welcoming.
• Worked with society leadership on mental health awareness and inclusive participation initiatives.