$ whoami

CloudEngineer

I design, secure and operate cloud infrastructure on AWS & Azure — security assessments, incident response, and migrations. Six years working at the seam between reliability, security, and developer experience, now at an AWS-focused MSSP and a founding partner on an agentic AI-driven SIEM.

loc London · Melbournetz GMT / UTC+0status open to new opportunities
01

about

~/about.md

# A short readme.

I'm Tom Westbrook, a cloud & security engineer who likes the unglamorous parts: the IAM policy nobody wants to write, the alert that fires before the customer notices, the runbook that actually works at 3am.

I work at an AWS-focused MSSP, delivering secure cloud environments and trusted advisory to organisations from SMBs to large enterprises across government, financial services and national retail. Over six-plus years I've progressed from Graduate Platform Operations Engineer to Site Reliability Engineer and now Cloud Security Engineer.

Lately: a Customer Logging Setup tool onboarding 150 client AWS accounts, a 270-subdomain Cloudflare→CloudFront migration, and founding-partner work bringing Perpetual Systems — an agentic AI-driven SIEM — to the Australian market, authoring detections in the Hamelin query language.

locationLondon · Melbourne
experience6+ yrs
focusAWS · Azure · Security
currentRedBear IT
status● available
02

experience

git log --oneline
  • [+]Designed and deployed serverless Lambda functions (Python) to automate custom log collection and Sumo Logic search pipeline integration, reducing manual security analysis time.
  • [+]Built the Customer Logging Setup tool to automate AWS log onboarding across 150 client AWS accounts.
  • [+]Migrated 270 subdomains from Cloudflare to AWS CloudFront.
  • [+]Led Azure application migration across regions for DR planning using Terraform IaC.
  • [+]Advised clients from SMBs to large enterprises — national retail, financial services (superannuation), and government — on cloud security controls and audit readiness.
  • [+]Delivered monitoring improvements for MSSP clients and participated in the on-call rota for security incident response.
  • [+]As a founding partner bringing Perpetual Systems, an agentic AI-driven SIEM, to the Australian market, migrated detections from Sumo Logic and authored custom detections in the Hamelin query language.
  • [+]Partnered with the vendor on UI/UX feedback, feature design, and early adoption of their API and MCP integration.
  • [+]Performed MITRE ATT&CK Framework coverage review for client Sumo Logic active search configurations.

stack: AWS · Python · Lambda · Terraform · Azure · Sumo Logic · CloudFront · MITRE ATT&CK · Perpetual Systems

  • [+]Served as major incident manager for P1 & P2 platform incidents using incident.io, ensuring low MTTR through coordinated response and cross-team collaboration.
  • [+]Participated in the Major Incident Manager on-call rota and executed multiple out-of-hours major changes.
  • [+]Led incident retrospectives for major platform outages impacting revenue, driving root cause analysis and implementing preventative measures.
  • [+]Delivered an AWS IAM restructure of roles and policies for the entire business, integrating with Azure AD groups.
  • [+]Implemented Service Level Objective (SLO) monitoring for applications within New Relic.

stack: incident.io · AWS IAM · New Relic · Azure AD · SRE

  • [+]Built and maintained reliability tools including SensuGo (YAML-based observability platform) for infrastructure monitoring.
  • [+]Developed GitLab CI/CD pipelines for automated infrastructure stack deployments.
  • [+]Created dashboards, alerts, and visualisations using ELK stack, New Relic, AWS CloudWatch, SensuGo, and Grafana.
  • [+]Contributed to cloud architecture migrations including AWS EC2 to ECS and Akamai to CloudFront, implementing monitoring strategies.
  • [+]Supported engineering teams deploying cloud-native applications with reliability and observability best practices.

stack: SensuGo · GitLab CI · ELK · New Relic · CloudWatch · Grafana

  • [+]Managed BAU operations: IAM changes, Nginx load balancer configuration, Elasticsearch retention policies, and New Relic alerting.
  • [+]Performed Elasticsearch stack version upgrades and EC2 instance maintenance.
  • [+]Automated user management and service health monitoring using Python scripts.
  • [+]Conducted comprehensive review of monitoring and alerting coverage across all platform microservices.
  • [+]Achieved the AWS Solutions Architect Associate certification (2021) and completed the QA Linux Fundamentals course (2020).

stack: AWS EC2 · Nginx · Elasticsearch · Python · New Relic

03

skills

cat ~/.toolbelt

## aws

[x]IAM
[x]S3 · SQS · SNS
[x]EC2 · SSM
[x]KMS · WAF
[x]CloudWatch · CloudFront
[x]CloudFormation
[x]Bedrock

## azure

[x]Storage Accounts
[x]Key Vault
[x]Defender
[x]App Services · Functions
[x]Application Gateway

## operations

[x]Elasticsearch / ELK
[x]New Relic · Grafana
[x]Sumo Logic
[x]incident.io · PagerDuty
[x]SensuGo
[x]GitLab CI/CD

## tools & security

[x]Linux
[x]Terraform
[x]Python · SQL
[x]Agentic Coding · AI Automation
[x]MITRE ATT&CK
[x]Perpetual Systems (SIEM)
04

education

~/edu
2015 — 2019
BSc Computer Science — 2:1 Hons
University of Lincoln
Core Computer Systems, Software Engineering, Databases, Networking & Machine Learning.
2020
QA Linux Fundamentals
QA Training
Linux system administration: file systems, process management, networking, and shell scripting.
# certifications — [x] = active
[x]AWS Certified Solutions Architect — Associate2021
05

contact

curl --data

# open a connection. all ports listening.

emailtom.westbrook@live.com
webtomwestbrook.dev
githubgithub.com/tomwestbrook1
linkedinlinkedin.com/in/tomwestbrook1
06

projects

~/projects/repr

# a thing I help ship — not just infra, the product too.

REPR — stop guessing, start progressing
platform iOS · Androidrole Contributorstack Flutter · Firebase · PostHog

A cross-platform strength-training app (Flutter) built to remove the guesswork from progressive overload — tracking workouts, personal records, and training volume with detailed analytics. I contribute across observability, product analytics, infrastructure, and QA.

REPR home screen showing training dashboard
Dashboard · training overview
REPR templates screen showing workout library
Templates · workout library
REPR analysis screen showing strength charts
Analysis · strength charts

## my role

[+]Observability — structured logging across core domain objects and live-workout state.
[+]Product Analytics — designed the PostHog architecture: user identification/aliasing, session grouping, and feature flags.
[+]Infrastructure Audit — reviewed production Firebase/GCP backup and recovery posture (Firestore daily backups, PITR and delete-protection gaps).
[+]QA & Testing — established the testing strategy and authored a GitHub Actions pipeline for tests and product builds.

stack: Flutter · Firebase · Firestore · PostHog · GCP · GitHub Actions

07

this-project

# how this site is built, shipped and hosted.

[+]Static by design. Next.js 16 exported to plain HTML, CSS and JS — no server, no runtime, nothing to patch.
[+]Infrastructure as code. Every AWS resource lives in Terraform; the whole environment is reproducible from scratch.
[+]S3 + CloudFront. Assets served from S3 behind a CloudFront CDN with TLS and global edge caching.
[+]Zero stored secrets. GitHub Actions assumes an AWS role over OIDC — no long-lived credentials in CI.
[+]Ship on push. Every push to main runs the tests, builds the export, syncs to S3 and invalidates the CDN cache.
[+]Responsive everywhere. A fluid layout that adapts from widescreen to phone — collapsing columns, a hamburger menu and a hero that scales with the viewport.