Computer security advising

Built and maintained product security tools for DevSecOpsImplemented critical security features in collaboration with product engineering teams

Co-built and maintained high-performance threat intel backendAbuse detection and response across product platformsEvaluated and implemented vendor security productsMentorship of junior employees

Investigated and mitigated high-impact espionage / ecrime intrusionsCore contributor to custom high-performance detection framework

Ran corporate infosec, cloud / infrastructure security, vuln scans, pentests, bug bountyAdvised technical leadership and executives on emerging threatsWorked with engineering teams to prioritize and implement product security

High-touch support for major clientsWrote Python integrations for security product

Technical espionage / ecrime investigations for federal law enforcementResearch collaboration across agencies and national labsContributed intrusion methods, mitigations and case studies to ATT&CK projectContributed to design and implementation of STIX / TAXII intel sharing formatsPitched research, secured funding and published research on honeypot strategies (see Publications section)

Malware Analysis, Reverse Engineering, Intrusion investigationsWrote technical reports and intelligence briefings for federal and corporate clients

Onsite support for federal law enforcement agency in e-crime, counter-espionage, insider threatEscalation team for intrusion detection and responseProposed and executed novel research projects

Researched national security topics and outreached subject matter expertsWrote report and briefed general-level staff and organization at large

Exploit development and honeypot researchPresented findings across lab research groups

Wrote detections and mitigations for enterprise securityInstalled and configured SIEM to detect malicious activity

Created automation for insurance processes