I'm Alex O'Meara. I help organizations build security programs and harden the systems they depend on, with clear priorities and work that sticks after the engagement ends.
Grand Rapids, MI · Remote nationwide · On-site in West Michigan
01 / About
Pragmatic security, built to last
Good security fits the way a team already works. I focus on the controls and practices that measurably reduce risk, and I build them so your people can own them long after I've moved on.
I've spent more than eight years in-house on security teams. At a statewide health system I ran vulnerability management and secure configuration programs, and led emergency responses like Log4j across a large clinical environment. Today I build DevSecOps controls, detection pipelines and security platforms on a small team at a technology company.
Through O'Meara Consulting I bring that experience to organizations that need it without a full-time hire. I help engineering and leadership teams decide what to fix first, build controls that hold up in practice, and show progress to customers, auditors and leadership.
02 / Services
Where I can help
Work is offered as fixed-scope projects with defined deliverables, or as hourly advisory when you need an experienced second opinion. Each engagement is sized to your stage and risk.
Strategy & Governance
Security Program Development
Build or overhaul the programs that keep risk visible and moving, with clear ownership, realistic SLAs and reporting leadership can act on.
Vulnerability management programs
Remediation SLAs & escalation
CIS-aligned configuration baselines
Security roadmap
Vendor risk evaluation
SOC 2 / ISO 27001 / PCI audit support
Hands-on Engineering
Security Engineering
Practical hardening delivered as code: pipeline controls, baselines and automation your team can maintain, rather than a report.
CI/CD security (SAST, SCA, secrets scanning)
Cloud & Kubernetes hardening
Infrastructure as code
EDR & log pipeline rollouts
Least privilege & endpoint privilege management
Secrets management
Review & Guidance
Assessments & Advisory
An independent view of where you stand and what matters most, plus hourly advisory for design reviews, vendor questions and decisions in between.
Threat modeling (STRIDE)
Architecture & cloud configuration reviews
Vulnerability triage & prioritization
AI adoption risk review
Hourly advisory
03 / Approach
How an engagement works
01
Assess
Learn how your business, systems and team actually work, and where the real exposure is.
02
Prioritize
Turn findings into a short, ranked plan tied to business risk instead of a long list of everything.
03
Build
Implement the controls, automation and processes alongside your team, not in a separate silo.
04
Hand off & sustain
Document, train and transfer ownership so the work keeps paying off after the engagement ends.
04 / Contact
Let's talk about your security goals
Tell me a little about your organization and what you're working toward. I'll follow up to set up a short intro call.