Security Engineering & Program Development

Build a security program that holds up.

I'm Alex O'Meara. I help organizations build security programs and harden the systems they depend on, with clear priorities and work that sticks after the engagement ends.

Grand Rapids, MI · Remote nationwide · On-site in West Michigan

Pragmatic security, built to last

Good security fits the way a team already works. I focus on the controls and practices that measurably reduce risk, and I build them so your people can own them long after I've moved on.

I've spent more than eight years in-house on security teams. At a statewide health system I ran vulnerability management and secure configuration programs, and led emergency responses like Log4j across a large clinical environment. Today I build DevSecOps controls, detection pipelines and security platforms on a small team at a technology company.

Through O'Meara Consulting I bring that experience to organizations that need it without a full-time hire. I help engineering and leadership teams decide what to fix first, build controls that hold up in practice, and show progress to customers, auditors and leadership.

Where I can help

Work is offered as fixed-scope projects with defined deliverables, or as hourly advisory when you need an experienced second opinion. Each engagement is sized to your stage and risk.

Strategy & Governance

Security Program Development

Build or overhaul the programs that keep risk visible and moving, with clear ownership, realistic SLAs and reporting leadership can act on.

  • Vulnerability management programs
  • Remediation SLAs & escalation
  • CIS-aligned configuration baselines
  • Security roadmap
  • Vendor risk evaluation
  • SOC 2 / ISO 27001 / PCI audit support

Hands-on Engineering

Security Engineering

Practical hardening delivered as code: pipeline controls, baselines and automation your team can maintain, rather than a report.

  • CI/CD security (SAST, SCA, secrets scanning)
  • Cloud & Kubernetes hardening
  • Infrastructure as code
  • EDR & log pipeline rollouts
  • Least privilege & endpoint privilege management
  • Secrets management

Review & Guidance

Assessments & Advisory

An independent view of where you stand and what matters most, plus hourly advisory for design reviews, vendor questions and decisions in between.

  • Threat modeling (STRIDE)
  • Architecture & cloud configuration reviews
  • Vulnerability triage & prioritization
  • AI adoption risk review
  • Hourly advisory

How an engagement works

  1. 01

    Assess

    Learn how your business, systems and team actually work, and where the real exposure is.

  2. 02

    Prioritize

    Turn findings into a short, ranked plan tied to business risk instead of a long list of everything.

  3. 03

    Build

    Implement the controls, automation and processes alongside your team, not in a separate silo.

  4. 04

    Hand off & sustain

    Document, train and transfer ownership so the work keeps paying off after the engagement ends.

Let's talk about your security goals

Tell me a little about your organization and what you're working toward. I'll follow up to set up a short intro call.