I am a security focused leader with experience that has involved building companies, breaking into companies, managing teams, designing products, software development, networking, telcos, support, and sales; enough to make for some good stories and experiences.Previously I was at Okta building the Customer Identity Cloud Red Team. This mighty team ran attack simulations and assume breach scenarios, found and exploited product vulnerabilities, built custom tools, and more..I was also the VP of security at npm helping secure the most popular registry of open source software, we were acquired by GitHub in 2020 where I was briefly a product manager focused on supply chain security. Before that I founded ^Lift Security, a successful application security and penetration testing services company and the Node Security Project, a security initiative to make the Node.js ecosystem secure. This project evolved into a SaaS platform that was at the forefront of the DevSecOps supply chain security tooling movement. Both were acquired by npm, inc in early 2018.Notable accomplishments:I pioneered the hacking technique BlindXSS (Blind Cross-Site Scripting), developed original techniques for pillaging remote git/hg/bzr repositories, and created SECURITY.md, a way for open source developers to address vulnerability disclosure in their projects.