- Architected and implemented company-wide security automation platform that unified asset inventory, vulnerability scanning, and remediation workflows across hundreds of services and thousands of assetsBuilt and maintained comprehensive scanning infrastructure covering DAST, SAST, secrets detection, and TLS compliance, working closely with engineering teams to achieve full coverage while minimizing friction- Led successful implementation of shift-left security controls including automated pre-commit checks and PR-time scanning, significantly reducing exposure of sensitive data- Performed detailed security assessments of critical services, helping teams identify and remediate complex vulnerabilities while maintaining engineering velocity

Designed and developed infrastructure and tooling to perform large scale asset enumeration, service detection, and content discovery with continuous monitoring of companies with bug bounty programs

- Identified, fixed, and prevented security and privacy flaws in Facebook's family of products through code review, security assessments, and improved static analysis tooling- Led Seattle bug bounty program including managing program health, payouts, and live events while serving as Facebook panel member for Internet Bug Bounty- Drove creation of Private Bounty Program and security documentation while collaborating cross-functionally with development teams, legal, and communications

- Led web application security assessments for Fortune 100 tech companies, managing teams of 2-4 consultants- Performed penetration tests and code reviews across web applications, mobile apps, and network infrastructure- Conducted independent security research resulting in an internal tool, Blackhat Arsenal presentation, and ToorCon talk

At NCC Group we provide discerning clients with high-end application services including penetration testing, code review, design review, architecture review, threat modeling and Secure Development Lifecycle creation.

Merged with NCC Group

Intern position in the Security Assurance Group working directly in the daily workflow. Identified potential risks, threats, vulnerabilities and exploits in FactSet systems, applications, and products through architecture reviews, security assessments, and various penetration testing methods. Managed the remediation of vulnerabilities and offered security advice to Systems and Software Engineers. Developed tools to enhance the team's workflow.

Produced visual effects and collaborated on creative decision making for RIT commercials and videos.