About | Remote Security Consultant | CISSP + OSCP+

Experience Highlights

What I've worked on

                  
                  Security engagements for government environments
                  Testing critical systems and data infrastructure in the public sector

                  
                  50+ penetration tests per year for financial services
                  Banks, insurers, and financial infrastructure at scale

                  
                  Security specialist for law enforcement
                  High-sensitivity assessments demanding absolute operational security

                  
                  Assessments for critical infrastructure and biotech
                  Environments where a security failure has real-world consequences

                  
                  Defence sector security testing
                  Classified and sensitive environments with strict scope requirements

Background

How I got here

I started my career in offensive security over 17 years ago, building expertise in the kind of environments where mistakes have real consequences — government, law enforcement, defence, and financial services. That exposure shaped how I approach every engagement: methodical, risk-focused, and thorough rather than just checkbox-driven.

I spent significant time in senior roles at Fox-IT / NCC Group, one of Europe's most respected security firms, working across a wide range of industries and engagement types. That background gave me both the technical depth and the professional rigour that complex clients expect.

In 2019 I established CyberScore B.V. to work independently — combining the quality standards of larger firms with the flexibility and directness of a specialist consultant. I hold the CISSP and OSCP+ certifications and split my time between the Netherlands and Barcelona, working 100% remotely with clients and partners across the EU.

My approach is straightforward: I find real vulnerabilities, explain them clearly, and help you fix them. No inflated findings, no jargon for its own sake, no templates dressed up as tailored work.

How I Work

What to expect

Every engagement starts with a clear scope agreement and NDA — testing doesn't begin without written authorisation. During the engagement you'll get progress updates without needing to chase. The final report includes both an executive summary for leadership and a full technical breakdown for your development or IT team.

I'm available for direct client engagements, long-term advisory retainers, and whitelabel delivery for IT partners and MSPs. All work is remote — no travel required from either side.

Remote Security Consultant

What I've worked on

How I got here

What to expect

Certifications

Sectors

Ready to work together?

Looking for a remote security consultant?