$ cat /etc/profile.d/liam.sh

NAME="Liam Romanis"
ROLE="Senior Cloud Security Consultant | Security Tool Developer |  Offensive Security Veteran"
EXPERIENCE="30 years in offensive security, vulnerability research and security assurance"
CURRENT_FOCUS="Kubernetes security · Container escape assessment · Cloud IAM · AI-assisted security tooling"
FORMER_ROLE="CESG CHECK Team Leader (1999–2023) — one of the longest continuous tenures in the scheme"
SECTORS="UK Government · MOD · Defence Primes · Financial Services · Telecomms · CNI · Commercial"
FOCUS="Manual testing excellence · Vulnerability research · Pragmatic risk-based assessment"
CURRENTLY="Developing cloud-native security tooling, researching Kubernetes attack paths and applying AI to security engineering workflows."

I’m interested in senior roles involving cloud security engineering, Kubernetes security, security research, application security, product security and offensive security automation.

I combine three decades of offensive security experience with practical software development to build tools that help organisations secure modern cloud and containerised environments.

• Kubernetes container escape techniques
• Linux namespace isolation
• AWS IAM privilege escalation
• Microsoft Entra Conditional Access
• AI-assisted security analysis
• Secure software tooling
• Holistic Cloud Security
• LLM Security
• Github Security

Click me:

A bash script that runs inside a Docker or Kubernetes container and checks for escape vectors. Built for penetration testers and security teams doing container security assessments.

bash . Docker . Kubernetes . Linux . Vulnerabilities . Mitigations

Python 3 tool to analyze AWS IAM policies for risky permissions. Tracks affected principals, simulates sensitive actions, detects privilege escalation patterns, and flags cross-account trust exposures. Outputs findings in Table, JSON, or CSV with severity scoring (0–100).

Python · AWS · IAM · PrivEsc Detection · Cloud Security

Python 3 tool which dentifies potentially insecure IAM role trust policies in your AWS environment. Specifically, it detects roles that allow cross-account AssumeRole access without enforcing ExternalId or MFA, which can pose a security risk.

AWS . Python . IAM

Python3 script which enumerates available subscriptions and storage accounts in each. It then tests for weak configuration items.

Azure . Storage Accounts . Python

Collection of scripts for testing M365 subscriptions (& Azure). Most of these scripts assume that access has been gained with a low privilege user account or that you are performing testing as a typical user where you do not have access to powershell. These scripts are intended for educational purposes or for authorized security assessments.

M365 . Python

This script gets a count of all users in the tenant for comparision. It then gets each Conditional Access Policy and enumerate all included and excluded users, groups and roles. It then gets the members of each group and users with each role, then it sorts and uniques all included users and members of groups and roles to get a count of all included users accounts. It performs the sam functions on excluded users, groups and roles to get a count of all unique excluded users. Because the script gets a count of all users in the tenant we can calculate the total number of users not affected by a policy [total users - total unique included users]. The script also gets a list of all included and excluded Apps and Resources. There is some output to the screen and a CSV file is output at the end.

Azure . PowerShell . Microsoft Entra ID . Conditional Access Policies

Passive network sniffing tool that simplifies detection and reporting of network protocols with weak configurations. Outputs results in Nessus-compatible format for seamless import into reporting tools.

Python · Network Security · Passive Recon · Nessus Integration

Proof-of-Concept for CVE-2025-29927 — a critical middleware bypass vulnerability affecting Next.js versions 11.x through 15.x. For authorised security testing and verification.

Python · CVE Research · Next.js · Web App Security

✔ UK Government & MOD                ✔ Defence Primes
✔ Financial Services (MetroBank, ICAP, EBLF)   ✔ Telecommunications
✔ Critical National Infrastructure   ✔ NHS & Central Government
✔ Commercial Enterprise              ✔ SaaS & Cloud Platforms

Click me:

┌──────────────────────────────────────────────────────────────────────────────┐
│  "Security is not a product, but a process — and I've been in that           │
│   process longer than most frameworks have existed."                         │
└──────────────────────────────────────────────────────────────────────────────┘