
CISO
Syed Kamran Shah
Sets the defensive standard. Kamran's job is to make sure every engagement leaves the client's detection and identity story stronger than it started.
Selected work
Engagements they shaped
2025
Fintech
Nordbank Digital
Offensive Security
Three critical attack chains closed pre-audit; detection coverage on the payment domain moved from 41% to 93%.
3
Critical chains closed
93%
Detection coverage
6wk
Engagement
2026
Energy
Helion Grid
Offensive Security
Cross-account escalation path eliminated and least-privilege baselines codified as policy-as-code.
0
Escalation paths left
118
Findings remediated
IaC
Guardrails shipped