Led by rigorous research
We translate research in digital forensics, secure architectures, and AI/ML safety into usable real-world outcomes.
Cybersecurity consulting
Secure architecture.
Resilient systems.
Research-grounded security that ships. We help teams design secure, forensic-ready systems and run practical risk governance without slowing delivery.
- Secure SDLC
- Digital Forensic Readiness
- Cyber Risk Management
- AI/ML Safety in Security
What we deliver
- Security-by-design architecture reviews
- Forensic readiness + DFIR playbooks
- Risk governance aligned to standards
- AI/ML resilience for security systems
Focused, evidence-driven, and implementation-ready.
Trust & proof
Research-grounded, operationally practical. Built for teams that need clarity, not noise.
Standards-aligned
Practical alignment to frameworks such as NIST and healthcare expectations (HIPAA/HITECH), tailored to your operating reality.
Practical, standards-aligned logging
Centralized log management aligned with CISA guidance—configured, documented, and usable for detection, response, and investigation.
Forensic-ready by design
Evidence integrity, logging readiness, and incident workflows that reduce chaos when incidents occur.
Example
Architecture hardening
Outcome: prioritized fixes + an implementation plan to reduce attack surface.
Example
Secure SDLC rollout
Outcome: security gates + developer workflow that preserves delivery speed.
Example
Forensic readiness
Outcome: evidence-ready logging + DFIR playbooks for faster response.
Services
Clear deliverables that strengthen resilience without slowing delivery.
Secure Software Architecture
Threat modeling, architecture hardening, secure patterns, and design review.
Secure SDLC Programs
Security gates, CI/CD controls, code review standards, and developer enablement.
Digital Forensic Readiness
Logging, evidence integrity, retention, and forensic-ready system design.
DFIR Playbooks
Incident response runbooks, tabletop exercises, and escalation workflows.
Risk & Governance
Cyber risk management and policy alignment to your operating reality.
Compliance Alignment
Support for controls alignment (e.g., NIST, HIPAA, HITECH) and audit readiness.
Centralized Log Management (SMB-ready)
Collection, storage, dashboards, and alerting—implemented with documentation and team training.
AI/ML Safety & Resilience
Robustness, misuse resistance, and responsible deployment for AI-enabled security.
Security Research Translation
Turn advanced research (NLP/ML/forensics) into actionable security strategy.
Key highlights
Representative outcomes, tailored to your threat landscape and operating constraints.
- Designed and implemented secure SDLC frameworks aligned with NIST, HIPAA, and HITECH expectations.
- Developed DFIR playbooks to strengthen preparedness against cybercrime and reduce response friction.
- Provided cyber risk governance and compliance guidance aligned with privacy regulations and industry standards.
- Deployed centralized security logging, alerting, and evidence-ready retention for lean teams.
- Applied AI/ML safety and resilience techniques to support responsible deployment and reliability.
Insights & publications
Short, practical guidance informed by research and real-world security delivery.
Featured insight
Why “Secure by Design” Keeps Failing — and What a Threat-Modeling-First Culture Actually Looks Like
The phrase has been diluted into a compliance checkbox. After a decade of engagements, the pattern is consistent: security is treated as a property to be checked rather than a discipline practiced continuously. Here’s what actually changes that.
Read insightInsight
Secure SDLC: what “good” looks like
A practical blueprint for shipping faster while reducing risk—without bureaucracy.
ReadInsight
Forensic readiness in SaaS systems
Minimum logging + evidence integrity practices that make investigations faster and defensible.
ReadInsight
DFIR playbooks that actually work
Runbooks teams follow under pressure—clear triggers, owners, and escalation.
ReadSelected publications
Research contributions in digital forensic readiness, secure architectures, and human communication-based cybercrime detection.
- Digital forensics readiness Forensic-ready architectures & evidence integrity
- Secure systems Security-aware microservices and resilient design
- AI/ML in security NLP/ML approaches for cybercrime signals
About the founder
PhD-trained. New York City‑based.
I founded SB Cyber Lab to close the gap between rigorous security research and what engineering teams can actually ship. My doctoral work spanned digital forensic readiness, secure architectures, and NLP/ML approaches to cybercrime detection — and every engagement I run draws directly on that foundation.
Based in New York City, I work with a small number of clients at a time across financial services, healthcare, and technology — sectors where the cost of getting security wrong is high and the pressure to move fast is real. I bring an academic's precision and a practitioner's instinct for what matters in production.
My ORCID is 0000-0003-0523-2751 — you can see the published research there. The consulting work builds on it.
Background
- PhD — security research, forensics & ML
- New York City — available globally
- Published researcher (ORCID: 0000-0003-0523-2751)
- Specialist in forensic readiness & secure architecture
Engagement options
- Architecture review (1–2 weeks)
- Secure SDLC blueprint + rollout plan
- DFR/DFIR readiness assessment
- Centralized logging & monitoring baseline
- Risk governance advisory
What we deliver
- Research → delivery: translating research-grade security into practical outcomes.
- Secure-by-design architecture: systems that withstand real-world threats.
- Resilience under pressure: stronger response, recovery, and operational confidence.
- Centralized logging: a practical baseline for collection, alerting, and enablement (1–2 weeks).
- Forensic readiness: evidence captured, preserved, and usable when incidents occur.
If you want a focused security program with clear deliverables—not endless theory—this is where we work.
Open to roles
Get in touch →
Available for senior security leadership positions
Actively considering CISO, VP Security, Principal Security Architect, and board-level advisory roles — particularly in fintech, healthcare, and AI-enabled infrastructure.
CISO
VP Security
Security Architect
Advisory / Board
Fintech · Healthcare · AI
Request a consultation
Choose what you need and share a few details. We’ll respond with next steps and a proposed plan.
Response time
24–48 hours (Mon–Fri)
Urgent requests: select “Urgent” below.
What you get
- Clear next steps
- Suggested engagement option
- Timeline + deliverables