Frederick Wightman

Innovative professional with progressive experience assessing organisational risk and aligning security posture to cyber security frameworks including ISO 27001, Cyber Essentials, NCSC CAF, NIST and NIS2. Experienced practical skills in creating, delivering, and reporting on Cyber Incident Exercises. Expert in translating complex technical concepts, with extensive experience designing and delivering Cyber Incident Exercises, reviewing Business Continuity, Disaster Recovery and Business Impact Assessment documentation, and identifying gaps between stated resilience and operational reality.

Proficient in introducing cybersecurity best practices, devising risk mitigation plans, and resolving complex issues in a timely manner.

Cyber Essentials

Assessor certified, with a consistent track record of translating technical risk into terms senior, non-technical stakeholders act on.

Active Developed

Vetting (DV) security clearance held.

Services Architect & Cyber Security Consultant at EVALIAN LIMITED (2024-01 – Present)

As a Services Architect, assessed client environments and requirements to determine security service proportionality, acting as technical liaison between client and delivery teams and validating environment readiness against defined risk and compliance criteria. Reviewed technical documentation and environment detail to ensure engagement scope reflected actual organisational risk. As a Cyber Security Consultant, managed Cyber Incident Exercises by conducting scoping, discovery, exercise creation, on-site execution, and reporting.

• Assessed client security posture against NCSC CAF, NIST, NIS2, CRA and CIS 18 through gap analysis and Cyber Essentials Plus engagements, translating regulatory and compliance requirements into actionable remediation and roadmap priorities.
• Designed and delivered custom Cyber Incident Exercises built around client environment, services and network detail.

Reviewed Business Impact

Assessments, Business Continuity and Disaster Recovery documentation to identify gaps between stated resilience and operational reality, then tested and verified plan execution against realistic, industry-specific threat scenarios mapped to the MITRE ATT&CK framework.

• Scoped and evaluated client environments for SOCaaS engagements, assessing infrastructure maturity and operational proportionality to match service scope to client need, recommending service tiers, explaining SLA/SLO commitments, applying core SaaS service-design principles to a security operations context
• Achieved Cyber Essentials Assessor certification, allowing delivery of Verified Self-Assessment marking through the Cyber Essentials scheme.
• Designed custom roadmaps, including short-, medium-, and long-term goals for clients seeking a standing security partner.
• Composed ad-hoc statements of work (SoW) for bespoke customer requirements, liaising across delivery teams to maximise client value.

Technical Pre-Sales Consultant at TRUSTMARQUE SOLUTIONS LIMITED (2022-01 – 2024-12)

Directed the Presale Scoping and QA (PSQ) team, ensuring precise scoping and quality assurance across cybersecurity engagements including vulnerability assessments, penetration testing, and red teaming. Validated scoping documents against industry standards and compliance requirements to maintain accuracy and technical readiness. Evaluated and translated client requirements into defined scope, objectives, and methodologies for each engagement.

Assigned incoming projects to PSQ team members based on expertise and workload. Provided subject matter expertise on cybersecurity testing methodologies, validating scoping documents against industry standards and compliance requirements.

• Increased billable work by 40% for Capita by serving as point of contact for penetration testing services.
• Adhered to service level agreements by monitoring key metrics such as report turnaround, response times, and scoping accuracy.
• Improved client engagement within Trustmarque Cybersecurity Team by managing business priorities.

Cyber Mission Team Leader & CAPDEV at Ministry of Defense - 14th Signal Regiment (Electronic Warfare) (2017-01 – 2022-12)

Drove organic Troop-developed WiFI survey capability by deploying technological tools such as Burp Suite, NESSUS, Kali Linux, SQL, NMAP, Postgres, Aircrack-ng, tcpdump, Wireshark, QGIS, BASH scripting, and PowerShell. Carried out SDR prototyping and experimentation by co-ordinating with Defense Science and Technology Laboratory (DSTL) Staff. Raised network situational awareness by analysing traffic patterns and conducting network mining activities; delivered technical briefings to senior command, accommodating experienced newcomers and professionals.

Strengthened intelligence reporting by steering strategic planning, measurement, and PCAP analysis processes.

• Acquired extensive Red Team and reporting experience via Army & Defense cyber exercises including leadership roles as Team Tech Lead and Exercise SFX Lead for Windows during Defense Cyber Marvel 2022.
• Steered CAPDEV capability growth by iterating and updating existing cyber tools while rapidly prototyping new solutions to support analytical procedures and troop readiness. This includes extensive Python scripting experience developing collection and analysis tooling.
• Optimised actionable intelligence, personnel training, technical problem resolution, and real-time strategy implementation by managing Cyber Mission Team (CMT) operations.
• Improved regiment-level technical knowledge by delivering self-designed training on OSI 7 Layer Model, TCP/IP, number systems (binary, hexadecimal), and networking fundamentals.
• Augmented cyber mission effectiveness by leading 640 Troop, developing and deploying WiFi 802.11 inspection, intrusion, monitoring, and exploitation capabilities using OSINT and proprietary tools aligned with Cyber Kill Chain and MITRE ATT&CK.
• Boosted threat detection efficiency by utilising SIEM platforms such as HELK, SPLUNK, and Security Onion for comprehensive cybersecurity functions.
• Enhanced technical expertise through coding in BASH, Python, and PowerShell, with continuous OSINT enumeration and network management responsibilities.

Electronic Warfare & Signals Intelligence (EWSI) Operator at Ministry of Defense - 14th Signal Regiment (Electronic Warfare) (2016-01 – 2019-12)

Made well-informed decisions for senior officers using advanced knowledge of the electro-magnetic spectrum (EMS) combined with team guidance and communication of technical information. Carried out actionable real-time assessments and reports in high-pressure, competitive environments.

• Secured Top Trade Soldier distinction across the Regiment, and ranked first among several hundred Lance Corporals in recognition of exceptional performance and technical proficiency.
• Significantly raised operational readiness and minimised downtime by overseeing equipment maintenance and troubleshooting procedures.

Bachelor of Science (Honours) in Intelligence & Cybersecurity – Staffordshire University

Level 4 Certificate in Leadership and Management – ILM - City and Guilds