About
Sonny Enchill
Cybersecurity & SOC | Cloud & DevOps Engineer
Who I Am
I am a cybersecurity and DevOps professional with a foundation that most candidates in this space simply do not have: 19 years of hands-on enterprise IT experience, the last decade of which was spent as the sole owner of cybersecurity posture, cloud transformation, and IT governance for a regulated financial services organisation — reporting directly to the board.
That background — accountability for security in a regulated environment, not just exposure to it — is what I bring into my next role. Combined with an awarded MSc in Cybersecurity from Robert Gordon University and current hands-on DevOps engineering through a structured internship programme, I now operate at the intersection of security operations, cloud infrastructure, and DevOps delivery.
The Transition
Leaving a senior IT leadership role to pursue an MSc and rebuild as a hands-on technical practitioner was a deliberate decision, not a drift. I wanted to move from managing security policy to doing security work — from overseeing cloud adoption to architecting and deploying cloud infrastructure myself.
That is exactly what I have done. MSc Cybersecurity covering incident response, SIEM, digital forensics, penetration testing, threat modelling, and cloud security — awarded 2025. Alongside that, a series of production-grade DevOps assignments across AWS, Azure, and Terraform, building systems from scratch, breaking them deliberately, and fixing them under operational discipline.
What Makes Me Different
- Security depth with operational context — accountability for a regulated organisation's security posture for nearly a decade, not just academic study
- Dual-cloud, hands-on engineering — AWS and Azure across both enterprise deployment at Pensions Alliance Trust and current production-grade internship assignments
- DevSecOps from the start — every pipeline I build includes security controls by design: secrets handling, access governance, validation gates
- Agentic AI in infrastructure — applied Claude Code and MCP subagents to infrastructure security reviews and automated deployment pipelines
- Financial services regulatory literacy — GDPR, UK GDPR, business continuity planning, audit trails, and board-level reporting as lived practice
Roles I'm Targeting
SOC / Cybersecurity Analyst
SIEM, incident response, threat detection, log analysis
Cloud Engineer (AWS / Azure)
Infrastructure design, IaC, multi-cloud deployment
DevOps / DevSecOps Engineer
CI/CD pipelines, automation, security-first delivery
Credentials
MSc Cybersecurity
Robert Gordon University — Awarded 2025
CompTIA Security+
SY0-701 — Exam Scheduled August 2026
MCSA: Windows Server 2012
Microsoft Certified
Microsoft Certified Professional
MCP
Ready to see the work?
14 projects across cybersecurity, cloud, and DevOps.