Engagement

I take on a small number of engagements per year. The fit is usually:

• a financial sector security team with a problem that needs depth rather than presence: architecture review, control gap analysis, regulatory framing under DORA or NIS2, SOC tuning
• a product or infrastructure team that wants a security review from someone who has actually run the operational side
• specific technical work where the answer is not on the first page of search results

If that matches what you have, write directly: hi@johlem.net. Tell me what the problem is, what you've already tried, and what a useful outcome would look like. The engagements that work well are with teams that have already read enough of the work to know whether the fit is right.

No booking form. No discovery call as a first step. Email is the first step.