Get in touch
Security Architecture · Threat Detection · Applied Research

Principal-level security and detection engineering, on demand.

Hands-on technical leadership from a Principal. Security architecture, threat detection and applied research from someone who designs it, builds it and proves it works.

Get in touchSee services
From telemetry to a hardened environment Telemetry from endpoints, cloud and identity, and network and applications feeds detection engineering. Detections are validated through adversary emulation and purple teaming, which informs architecture and research, and results in a hardened, measurable environment. Endpoints Cloud & identity Network & apps Detection engineeringlogging · detections · triage Adversary validationemulation · purple team · tuning Architecture & researchdesign · prototypes · standards Hardened, measured environmentcoverage · resilience · evidence
Principal-level, hands-onCISSP certified15+ years in IT & security · remote-friendly
Services

Hands-on help, at the depth you need

Practical outcomes, delivered and proven in your own environment.

ProjectDefined scopeA clear problem, deliverable and timeline.
EmbeddedTechnical leadershipEmbedded with your team, or leading it.
Advisory hoursOn-call judgmentSenior technical input as decisions come up.

Security Architecture & Research

Design reviews and applied research from someone who builds the thing. Find the weak assumptions before an attacker does.

  • Threat modelling & design review
  • Reference architectures & prototypes
  • Technology & vendor evaluation

Threat Detection & Response Engineering

Detection built around how real adversaries operate, and validated by testing it rather than assuming it works.

  • Detection engineering & coverage mapping
  • Purple-team validation & tuning
  • Logging strategy & incident readiness

Infrastructure & Systems Architecture

Architecture and build-outs grounded in hands-on experience running real infrastructure.

  • Architecture, identity & hardening
  • Automation & build-outs
  • Hands-on delivery & technical team leadership
Approach

From problem to working solution

Understand

Learn your environment, threats and constraints first-hand, not from a slide deck.

Design

Architect a solution that fits your team, your stack and your real risks.

Build

Prototype, implement and integrate alongside your engineers.

Prove

Test it against real adversary behaviour and hand over something that works.

About

Still building.

Tim Vivian

I’m a Principal who still gets hands-on. I’ve worked from infrastructure through security programs, adversary emulation and red and purple teaming, to leading threat detection, and I lead research and architecture for the teams I work with.

That background means I design defences with an attacker’s eye, and I’m as comfortable reviewing an architecture as building the detection that backs it up.

Background
Adversary emulationThreat detection engineeringRed & purple teamingPenetration testingSecurity training
Certified Information Systems Security Professional (CISSP)ISC2Issued Jan 2019
Ivey Emerging Leaders ProgramIvey Business School Executive EducationIssued Jan 2023
15+ yearsAcross IT and information security
Testimonials

What people I’ve worked with say

“His focus on supporting our clients is second to none and knowing that we can count on the infrastructure that he manages is reassuring.”
Jason MacKenzieSenior colleague, TGT Solutions
“Tim’s ability to investigate, analyze, monitor, troubleshoot and determine server or data network problems makes him a great attribute to any team.”
Maja KukoljFormer colleague
“Tim is a very focused and flexible team member with very strong problem solving skills. His deep knowledge in a variety of technologies and his commitment to getting the job done make him a valuable member of any team he is a member of.”
Brian O’NeillManaged Tim directly
“[…] there was nothing that slowed him from meeting his deadlines and exceeding my expectations.”
Yazan Al-SheikhlyManaged Tim directly

Recommendations from my LinkedIn profile Read them all

Not sure what you need?

That’s a normal place to start. Tell me about your security program and we’ll figure out whether a project, a retainer or a few hours of advice fits.

[email protected]Connect on LinkedIn