Founded financial services organization supporting individuals reentering society following incarceration, leveraging strategic planning, business development, operations leadership, and stakeholder engagement to build and grow company while delivering positive impact to society. Build strategic partnerships, raise capital, and drive initiatives to create opportunities for those excluded from financial systems.

Oversee and enhance core business operations and infrastructure to support company’s growth and strategic vision, leading multiple teams across functions such as security, privacy, anti-abuse, corporate IT, Data Platforms, and Business applications. Drive operational efficiency, foster collaborative and transparent team environment, and guide organizational restructuring to enhance performance and cost efficiency.· Modernized commerce engine and data platform, elevating data governance and discovery and improving speed of feature and data delivery.· Introduced new strategies to optimize resources and eliminate millions of dollars in unnecessary expenses due to inactive application performance management system (APMS), excess contractors, and costly change implementations.

Led strategic efforts to protect Dropbox’s infrastructure, data, and users from security threats and abuse. Developed optimal policies, mitigated risk, and drove strategic initiatives to improve company’s security posture.· Transitioned company from qualitative to quantitative risk management, implementing Monte Carlo analysis and enhancing understanding and prioritization of security threats across organization.· Enhanced security posture through introduction of Zero Trust with phishing-resistant multi-factor authentication, delivering 0 employee account breaches.

Managed Blue Team dedicated to defending Amazon’s systems and networks against cyber threats, designing and introducing comprehensive security strategies, leading incident response, and driving continuous improvement of organization’s security posture. Partnered closely with other security teams, IT, and business units to protect company assets and maintain customer trust, led threat intelligence operations, enhanced detection and response processes, and fostered culture of transparent communication and collaboration.

* Manage 3 teams at Amazon, one focused on incident response, one focused on threat hunting and security monitoring, and the third focused on threat intelligence. * Developed Amazon's incident response program including detection, response, mitigation and reporting of security incidents. * Developed program metrics to measure the effectiveness of programs and the overall state of incident detection and response. * Formalized feedback loops between Threat Intelligence, Incident Response, Security Monitoring and other business units. * Developed requirements for our platforms and tool choices. * Formalized and manage the threat hunting and security monitoring team. Responsible for building detections and response capabilities based on the environment. * Formalizing the programs around indicators of compromise and how we use threat data. * Develop plans for full-lifecycle detection and response activities at Amazon. * Focused on career development of everyone on the teams. This includes formal and informal training and feedback. * Amazon's representative to FIRST and ICASI. * Formalized malware analysis and forensics at Amazon. Managed the people, process, and technologies responsible for: * Initiation and execution of the security incident response process, including prioritization and ranking of escalated incidents.* Use and requirements gathering of the security technologies including network logging and forensics, security information and event management tools, security analytics platforms, log search technologies, host-based forensics, case management systems, threat intelligence repositories and more. * Accept escalations from and act as subject matter experts for security incident response, threat hunting, and threat intelligence teams. * Identify and document improvements in our incident processes, as well as create new processes. * Produce detailed plans and reports outlining security incidents and lessons learned.

Responsible for advancing the security posture at Red Ventures.Maintain regulatory compliance as it relates to Information SecurityDaily monitoring and tuning of all IT security systems such as IDS/IPS, anti-virus, firewalls, DDoS and similar.Maintain and test Incident Response Plans.Code reviews of website code and internal applications considered “high risk”.Automated and manual penetration testing of key systems and applications.Research, testing and deployment of additional security processes and products.Recommend, update and monitor compliance with company security policies and partner contractual requirements.

* First response to security incidents and takes the incident handler role.* Define or redefine policies and procedures.* Manage ongoing queue of security tasks.* Provide advice/direction on security questions.* Aid in the closing and tracking of vulnerabilities.* Handle vulnerability disclosures from researchers.* Ensure that exception requests are handled properly.