James is the Principal Consultant for DFND and is a penetration tester and offensive security professional specialising in web application and network infrastructure security. His work involves finding what automated scanners tend to miss which is uncovering critical attack paths, chaining of vulnerabilities to demonstrate real risk and logic flaws buried deep inside systems across variety of different sectors such as finance and health.

He’s uncovered and helped remediate vulnerabilities ranging from low-severity misconfiguration to critical-severity exploits across large-scale systems such as banking applications. He finds issues and demonstrates the impact while communicate the risk clearly to both technical teams and non-technical stakeholders.

His expertise spans many offensive security domains such as web & API pen-testing , network and infrastructure testing on large enterprise environments such as data centers, OSINT and external attack surface mapping, cloud, phishing campaigns, AI testing and purple teaming.

James has mentored junior security professionals, developed detection logic in security solutions to enable organisations to detect threats early and stress-tested EDR/XDR solutions against real attacker techniques. James brings a mindset built around real-world threat emulation.

James also brings extensive experience in cybersecurity consulting, having audited over 700 organisations spanning Australian financial services firms and companies across international markets against the NIST Cybersecurity Framework. Through these engagements he has helped organisations understand their true security posture and implement meaningful improvements.