ZT Cyber Solutions
Zero Trust Cyber Solutions
SECURITY WITHOUT ASSUMPTIONS
Back to Home

Portfolio

Enterprise security experience, focused on the realities of growing businesses.

Zero Trust Cyber Solutions is founder-led by Ezekiel Lafleur, a cybersecurity engineer with experience building, operating, and improving security programs across enterprise, federal compliance, cloud, application, and endpoint environments.

Discuss Your Security NeedsWhy Choose ZTCS

10+

Years in IT and cybersecurity

15,000+

Assets supported through security automation

60–80%

Reduction in manual VM and compliance effort

3,000+

Network and access changes reviewed

Experience Behind Every Service

Six services, each grounded in hands-on experience.

Each ZTCS service maps directly to work performed by the founder in prior professional and consulting roles. The examples below show the capabilities brought to new engagements.

01

Vulnerability Management

Managed the vulnerability lifecycle across more than 15,000 assets, turning large volumes of findings into prioritized, owned, and measurable remediation work.

  • Prioritized risk using CVSS, CISA KEV status, exploitability, exposure, asset criticality, and remediation SLAs.
  • Coordinated ownership, Jira tracking, validation, closure, dashboards, and executive reporting across cloud, endpoint, and application findings.
  • Built Python and API automation that reduced recurring vulnerability and compliance effort by approximately 60–80%.
Discuss this service

02

Security Program / SOC 2 Readiness

Built repeatable control, evidence, and reporting processes in regulated environments—experience that translates directly to practical SOC 2 readiness.

  • Automated FedRAMP and TxRAMP POA&M, SSP, continuous-monitoring, and audit-evidence workflows.
  • Worked with NIST 800-53 control requirements and security expectations spanning SOC 2, ISO 27001, and HIPAA environments.
  • Improved evidence consistency, control ownership, documentation, and audit preparation while reducing manual preparation cycles by more than 60%.
Discuss this service

03

Endpoint & Zero Trust Security

Led secure-access and endpoint improvements that strengthened identity, device, network, and application controls without creating unnecessary user friction.

  • Administered and troubleshot Zscaler ZIA, ZPA, ZCC, and ZDX alongside Intune and Entra ID.
  • Led strict-enforcement rollout planning and support across approximately 1,000 managed devices.
  • Implemented secure remote access, SSO/MFA, SSL inspection, URL and file controls, exception governance, and deployment guidance.
Discuss this service

04

Application Security & AI Governance

Helped teams evaluate applications, remediate software risk, and adopt SaaS and AI tools with guardrails that protect data without blocking innovation.

  • Performed threat modeling and secure-code reviews across SAST, SCA, DAST, secrets, API, container, dependency, and infrastructure-as-code findings.
  • Used GitHub Advanced Security, SonarQube, Checkmarx, and developer enablement to turn findings into actionable remediation.
  • Applied Zscaler visibility and policy controls alongside security review processes to govern application access, third-party tools, and secure AI adoption.
Discuss this service

05

Security Engineering

Built integrations and automation that connected security data to the systems where teams prioritize, remediate, report, and make decisions.

  • Developed Python, Go, REST API, GitHub Actions, and Jira workflows for ticketing, reporting, evidence collection, and operational handoffs.
  • Integrated security capabilities across AWS, Azure, GCP, Wiz, Qualys, CrowdStrike, identity, endpoint, and application platforms.
  • Translated technical risk into scalable engineering processes, documentation, and clear priorities for cross-functional teams.
Discuss this service

06

IT Services

Brings a broad IT support and administration foundation to everyday technology needs, with security built into each recommendation and change.

  • Experience includes endpoint troubleshooting, device and software support, SharePoint administration, user support, and IT service-management automation.
  • Troubleshoots networking and access issues across DNS, TLS, routing, firewalls, proxies, VPNs, identities, and managed devices.
  • Supports cloud, SaaS, Microsoft identity, endpoint management, documentation, and operational processes with a practical security mindset.
Discuss this service

NOT LISTED?

Your technology need may still be a fit.

Not every technology challenge fits neatly into a service category. ZTCS is comfortable investigating unfamiliar environments, learning new platforms, and applying transferable IT, engineering, and cybersecurity experience. If your need is not listed, tell us what you are working through—we will honestly confirm whether it fits our capabilities or whether a specialist would better serve you.

Tell Us What You Need

Professional Foundation

Experience from complex environments—applied with small-business practicality.

Ezekiel's prior professional experience includes cybersecurity roles within global technology and health-data organizations, along with security consulting and operations work across multiple client environments.

That background informs ZTCS's approach: understand the business, identify the risk that matters most, implement controls that teams can actually operate, and leave behind a stronger process—not just a report.

Portfolio examples reflect the founder's prior professional experience and are not presented as ZTCS client case studies or endorsements.

Bring This Experience to Your Business

Start with the security problem creating the most risk or friction.

We'll clarify the problem, define a practical scope, and provide a written quote before any paid work begins.

Request a Scoped Quote