$ whoami

CloudEngineer

I design, secure and operate cloud infrastructure on AWS & Azure — perform security assessments, incident response, and migrations. Six years working at the seam between reliability, operations, and security, currently at an MSSP which is a founding partner for an agentic AI-driven SIEM.

loc London, UKstatus open to new opportunities
01

about

~/about.md

# A short readme.

I'm Tom Westbrook, a Cloud Security Engineer with 6+ years of experience across cloud security and site reliability engineering. A fast learner with a proven track record of progression, I advanced from a graduate engineering role to Site Reliability Engineer in under four years, developing expertise in AWS core services, incident management and observability platforms including ELK Stack, New Relic and Grafana.

Currently working for an AWS-focused MSSP, I combine strong technical expertise with client-facing leadership to deliver secure cloud environments and trusted advisory services to organisations ranging from SMBs to large enterprises across government, financial services and national retail. Contributing as a founding partner of a new agentic AI-driven SIEM product (Perpetual Systems), I have worked closely to improve the product, UI and onboarding experiences.

Known for building trusted relationships, I take a collaborative, approachable and solutions-focused approach to working with clients, stakeholders and technical teams.

locationLondon, UK
experience6+ yrs
focusAWS · Azure · Security
currentRedBear IT
status● available
02

experience

git log --oneline
  • [+]Built the Customer Logging Setup tool to automate AWS log onboarding for 150 client AWS accounts.
  • [+]Designed and deployed serverless Lambda functions (Python) for automated custom AWS logging configurations, AWS configuration hardening, and Sumo Logic custom ingestion pipelines.
  • [+]Led and delivered an application migration across regions in Azure for DR recovery processes managed with Terraform, including configuration of Azure Application Gateway, Key Vault and Storage Accounts.
  • [+]Advised clients ranging from SMBs to large enterprises across government, financial services and national retail on cloud security controls, posture hardening and audit readiness.
  • [+]Delivered monitoring improvements for MSSP clients and participated in the on-call rota for security incident response.
  • [+]Developed log search detections and dashboards for Sumo Logic and Perpetual Systems, improving internal & client security posture and observability.
  • [+]Working with Perpetual Systems as founding partners, an agentic AI-driven SIEM, bringing it to the Australian market.
  • [+]Configured parsers and mappers for Perpetual Systems, enabling ingestion of AWS, Azure and third-party logs including CrowdStrike and Bitwarden to Elastic Common Schema (ECS) format.
  • [+]Performed MITRE ATT&CK Framework coverage review for client Sumo Logic active search configurations.

stack: AWS · Python · Lambda · Terraform · Azure · Sumo Logic · MITRE ATT&CK · Perpetual Systems

  • [+]Served as major incident manager for P1 & P2 platform incidents using incident.io, ensuring low MTTR through coordinated response and cross-team collaboration.
  • [+]Participated in the Major Incident Manager on-call rota and operated out-of-hours major changes.
  • [+]Led incident retrospectives for major platform outages impacting revenue, driving root cause analysis and implementing preventative measures.
  • [+]Delivered an AWS IAM restructure of roles and policies for the entire business, integrating with Azure AD groups.
  • [+]Implemented Service Level Objective (SLO) monitoring for applications within New Relic.

stack: incident.io · AWS IAM · New Relic · Azure AD · SRE

  • [+]Built and maintained reliability tools including SensuGo for infrastructure monitoring.
  • [+]Created dashboards, alerts and visualisations in Kibana, New Relic, AWS CloudWatch, SensuGo and Grafana.
  • [+]Contributed to cloud architecture migrations including AWS EC2 to ECS and Akamai to CloudFront, implementing monitoring strategies.
  • [+]Supported engineering teams deploying cloud-native applications with reliability and observability best practices.

stack: SensuGo · Kibana · New Relic · CloudWatch · Grafana

  • [+]Managed BAU operations including IAM changes, Nginx load balancer configuration, Elasticsearch retention policies and New Relic alerting.
  • [+]Performed Elasticsearch stack version upgrades and EC2 instance maintenance.
  • [+]Automated user management and service health monitoring using Python scripts.
  • [+]Conducted comprehensive review of monitoring and alerting coverage across all platform microservices.
  • [+]Achieved AWS Solutions Architect Associate certification (2021) and completed QA Linux Fundamentals Course (2020).

stack: AWS EC2 · Nginx · Elasticsearch · Python · New Relic

03

skills

cat ~/.toolbelt

## aws

[x]IAM
[x]S3 · SQS · SNS
[x]EC2 · SSM
[x]KMS · WAF
[x]CloudWatch · CloudFront
[x]CloudFormation
[x]Bedrock

## azure

[x]Storage Accounts
[x]Key Vault
[x]Defender
[x]App Services · Functions
[x]Application Gateway

## tooling

[x]Elasticsearch
[x]New Relic · Grafana
[x]Sumo Logic
[x]incident.io
[x]GitHub Actions
[x]GitLab CI/CD

## skills

[x]Linux
[x]Terraform
[x]Python
[x]Agentic Development
[x]Perpetual Systems
[x]Incident Management
04

education

~/edu
2015 — 2019
BSc Computer Science — 2:1 Hons
University of Lincoln
Core understanding of Computer Systems, Software Engineering, Databases, Networking & Machine Learning.
2020
QA Linux Fundamentals
QA Training
# certifications — [x] = active
[x]AWS Certified Solutions Architect — Associate2021
05

contact

curl --data

# open a connection. all ports listening.

emailtom.westbrook@live.com
webtomwestbrook.dev
linkedinlinkedin.com/in/tomwestbrook1
06

projects

# a thing I help ship — not just infra, the product too.

REPR — stop guessing, start progressing
platform iOSrole Contributorstack Flutter · Firebase · PostHog

A strength-training app (Flutter) built to remove the guesswork from progressive overload — tracking workouts, personal records and training volume with detailed analytics. I contribute across product analytics, cloud infrastructure, engineering practice and QA.

REPR home screen showing training dashboard
Dashboard · training overview
REPR templates screen showing workout library
Templates · workout library
REPR analysis screen showing strength charts
Analysis · strength charts

## my role

[+]Product Analytics — added an analytics event layer behind an analytics abstraction, with PostHog and Firebase Analytics, user identification/aliasing and session grouping.
[+]Infrastructure — advised architecture and implementation of cloud infrastructure to scale from 0 to 1k+ users and beyond.
[+]Engineering Practice — implemented development best practices including the handling of secrets and vulnerability management, and code review processes to catch defects before release.
[+]QA & Testing — established the testing strategy, authoring a GitHub Actions pipeline for testing and product builds.

stack: Flutter · Firebase · PostHog · Firebase Analytics · GitHub Actions

07

this-project

# how this site is built, shipped and hosted.

[+]Static by design. Next.js 16 exported to plain HTML, CSS and JS — no server, no runtime, nothing to patch.
[+]Content as data. Every word on this page comes from a single YAML file, compiled into the build — copy edits never touch a component.
[+]Infrastructure as code. Every AWS resource lives in Terraform; the whole environment is reproducible from scratch.
[+]S3 + CloudFront. Assets served from S3 behind a CloudFront CDN with TLS and global edge caching.
[+]Zero stored secrets. GitHub Actions assumes an AWS role over OIDC — no long-lived credentials in CI.
[+]Ship on push. Every push to main runs the tests, builds the export, syncs to S3 and invalidates the CDN cache.
[+]Responsive everywhere. A fluid layout that adapts from widescreen to phone — collapsing columns, a hamburger menu and a hero that scales with the viewport.