Bio
First-Class Cybersecurity graduate (BSc, Wolverhampton) and MSc Cybersecurity candidate at King's College London, working across offensive security, digital forensics, network security, and security engineering. Currently researching post-quantum cryptography for secure messaging.
Mark Saviour Farrugia
Cybersecurity Student
Web Application Security Testing (Burp Suite, Kali Linux), ZTNA & Endpoint Protection (Sophos), Vulnerability Assessment, Incident Management (Freshdesk), Active Directory Management
Web development with HTML, CSS, JavaScript, PHP and Bootstrap as the focus area, alongside Python, C#, Rust and Java for systems and applications work. Designed and developed 3 commercial websites plus this personal portfolio (marksaviour.io).
Windows Golden Image creation, Server rack management & cabling, Cisco infrastructure setup, Asset lifecycle tracking (Xeox), Network fundamentals & simulation (Cisco Packet Tracer)
- Organisation
- St. John’s Pharmacy & Medical Centre · Jun 2025 – Sep 2025 · Summer Engagement
- Focus
- EDR rollout, Zero Trust Network Access and incident response across networking, servers, storage, endpoints and AV systems.
- Reduced the organisation’s external attack surface across all company endpoints by deploying endpoint detection & response (EDR), establishing centralised endpoint protection where none previously existed.
- Implemented Zero Trust Network Access (ZTNA) using TwinGate, replacing implicit-trust connectivity with identity-verified access for remote and on-site staff.
- Managed 5 device categories (networking, servers, storage, endpoints, AV) and minimised operational downtime through proactive maintenance and monitoring.
- Served as primary responder for all IT and security incidents during daily operations and events, resolving issues to maintain business continuity.
- Organisation
- RSM Malta · Jun 2023 – Mar 2024 ·
- Focus
- Endpoint security (Sophos EDR), Windows Golden Image deployment, IAM in Active Directory and IT operations in a 3-person team.
- Cut new-employee onboarding time by 70% (from 2.5 hours to 45 minutes) by designing and deploying a Windows Golden Image tailored to the organisation’s needs.
- Strengthened endpoint security across 100% of company devices by managing Sophos endpoint protection (EDR), maintaining consistent threat-defence coverage organisation-wide.
- Improved support efficiency as part of a 3-person team by streamlining incident-management workflows in Freshdesk and maintaining audit-ready asset records through the full hardware lifecycle in Xeox.
- Enforced least-privilege access by administering user accounts in Active Directory, applying identity and access management (IAM) principles to staff onboarding and offboarding.
- Issuing body
- King's College London · Sep 2025 – Sep 2026
- Grade
- Currently ongoing
- Thesis
- “Post-Quantum Signal: PQXDH” (in progress)
- Modules
- Machine Learning & Agent Reasoning, Cryptography, Security Engineering, Security Management, Cybercrime & Forensics, Network Security
- Issuing body
- University of Wolverhampton · Sep 2022 – Jun 2025
- Grade
- First Class Honours
- Thesis
- “Exploring Different 2FA Methods and Their Vulnerabilities”
- Modules
- Web Development, Networking Principles & Security, Ethical Hacking, Digital Forensics, Vulnerability Assessment, OOP, Databases, IT & Security Operations
- Issuing body
- NCC Education · Sep 2022 – Jul 2023
- Grade
- Merit
- Modules
- Web Development, Networking Principles & Security, Ethical Hacking, Digital Forensics, Vulnerability Assessment, OOP, Databases, IT & Security Operations
Industry training completed. Exams currently deferred while prioritising the MSc dissertation.
- Certifying body
- ISC2 · Certified Information Systems Security Professional
- Training provider
- Firebrand Training · Official ISC2 instructor-led course
- Status
- Training complete · Exam deferred while prioritising the MSc dissertation
- Focus
- All eight CISSP domains: Security & Risk Management, Asset Security, Security Architecture & Engineering, Communications & Network Security, Identity & Access Management, Security Assessment & Testing, Security Operations, Software Development Security.
- Certifying body
- Cisco · Cisco Certified Network Associate
- Training provider
- Independent / self-directed study
- Status
- Training complete · Exam deferred while prioritising the MSc dissertation
- Focus
- Networking fundamentals, IP connectivity, IP services, security fundamentals and network automation & programmability.