I’ve spent decades as a security architect that focuses on helping secure software, data and infrastructure. You might say I’ve been on and led Blue and Red Teams well before it was even a thing. I’ve built and sold several software companies focused on securing the ever changing landscape of IT, both on-premises and in the cloud. I’ve been the founder and CTO of small startups with a handful of developers all the way to managing teams with hundreds of developers from all around the world.Through all of that, what drives me is making sure information and information resources are kept secure. No matter what the size of the organization. Nor who is ultimately responsible for managing it. As both a Microsoft Regional Director and a Microsoft Security MVP for over 18 years, I spend a great deal of time on security (de)engineering in the cloud.Lately I’ve challenged myself to be more on Purple team, shifting more on my offensive tradecraft to help developers and IT administrators see the demonstrable impact of exploitation on vulnerabilities in their work. As the world of hybrid computing shifts more IT resources away from the office, its clear more effort is needed to educate both administrators and developers on how to build safe, decoupled systems in the cloud. I help people find and fix vulnerabilities in their apps and architecture before their adversaries do.It’s time we put thoughtfulness into the attitudes around development and administration in the cloud and I’m up for the challenge. Who else is walking this path? Let's connect.
Listed skills include Information Security, Network Security, Threat Modeling, Security, and 32 others.
