Looking for a job

David Levi

@davidlevi

Message

I build Zero Trust, cloud security, and DevSecOps programmes from strategy to implementation.

United Kingdom

Message

What I'm looking for

I'm open to remote security consulting, DevSecOps, and cloud security architecture engagements as a direct hire, through an Employer of Record, or as an independent contractor.

I've delivered security consulting, DevSecOps transformation, and solutions architecture through Invision Solutions Ltd since 2020, working across financial services, SaaS, e-commerce, and fintech.

I set Zero Trust and IAM strategy, then build the Terraform, CI/CD guardrails, SIEM integrations, detection logic, and runbooks that put it into practice across AWS, Azure, and GCP.

My work has helped a fintech achieve ISO 27001 certification in under five months, reduced audit preparation time by 40%, cut high-severity cloud misconfigurations by about 60%, and reduced SIEM alert volume by 55% for a large e-commerce client.

More recently, I've assessed SaaS and hybrid-cloud risks for Marks & Spencer and led SOC readiness, CrowdStrike metrics, Datadog monitoring, PagerDuty alerting, and multi-cloud compliance controls for International Airlines Group.

Experience

Work history, roles, and key accomplishments

Current

Security Consultant

Current

Invision Solutions Ltd

May 2020 - Present (6 years 4 months)

Principal consultant and company director delivering security consulting, DevSecOps transformation, and solutions architecture engagements for enterprise clients. Personally designs, builds, and operates the company's digital products and web presence.

Splunk Datadog SIEM ISO 27001 NIST GDPR Drata Wiz Policy as Code Security Awareness Cloud Security Incident Response Playbooks DevSecOps CI CD IaC

Cyber Security Consultant

Marks & Spencer

May 2026 - Aug 2026 (3 months)

Conducting security gap and vulnerability assessments across the technology estate, covering Microsoft 365, Google Workspace, Atlassian, MongoDB Atlas, and hybrid cloud infrastructure. Producing formal security deliverables including strategic guidance, findings reports, and remediation recommendations.

Security Assessments Vulnerability Assessment Microsoft 365 Google Workspace Atlassian MongoDB Atlas Risk Management Compliance Security Standards Reporting

DevSecOps Engineer

Leighton

Jun 2025 - Jun 2026 (1 year)

Led an internal SOC audit to assess detection coverage, alerting pipelines, and incident readiness. Delivered weekly CrowdStrike and AWS security metrics analysis, implemented compliance controls across Azure, AWS, and GCP, and deployed Datadog monitors and PagerDuty alerting pipelines.