Teaching cyber security and preparing Utah's next generation of cyber defenders.

Directly recruited after a high profile system hack to overhaul and engineer the foundational construction of a comprehensive cybersecurity program. This encompassed everything from infrastructure and fiduciary controls to personnel and cultural awareness that was instrumental to Uber’s acquisition in 2021.- Orchestrated security policies and procedures framework exceeding requirements of stringent FTC orders and subsequent audits.- Within first 30 days, created mitigation plan to reduce technical debt associated with rapid organizational growth.- To support organizational acquisition, quickly defined security vision and implemented NIST CSF standards along with new policies and procedures.- Effectively reduced budgetary spend by leveraging efficient operating guidelines.- Introduced PCI, MITRE ATT&CK, & NIST 800-53 standards that had alluded the company due to rapid organizational growth- Continue to modernize best practices by analyzing processes, infrastructure, and code reflecting changing industry trends- Developed a security-first company culture by being the champion of security awareness across DevOps, Engineering, and non-technical roles.- Managed and developed direct reports spanning across IT, Security, and Fraud Prevention

Leader of a globally distributed team that consisted of 10-20 managers as well as 30 security software engineers that lead to both the secure GTM launch of all new products as well as protect internal infrastructure team. -Engineered and maintained ongoing corporate security policies, policies, and procedures, including NIST 800-53, CISA, etc.- Architected threat modeling and risk analysis strategies of internally developed software products driving customer satisfaction through reduced bug count, a 99.1% uptime, and more visible product roadmap.- Drove top-line revenue by synthesizing cross-departmental collaboration between Product and Engineering teams to push new products to market more efficiently.- Head of security for all Canonical software products including Ubuntu, OpenStack, Kubernetes(k8s), snaps, certifications (FIPS 140-2, CIS & CC EAL2) and other FOSS.- Lowered response time to security events by conducting security tabletop exercises that increased speed, efficiency, and reporting accuracy.- Increased GTM strategies and user acceptance by leading IoT team for EdgeX software development- Led the robotics (ROS/ROS2) development team, bringing long-term support and stability to open source robotics- Championed security posture and awareness for organization, monitoring changing industry security trends and integrating them into daily practices and product development.

Assist the CERT Division of the Software Engineering Institute with information security research. - Automate DFIR using Python - Train LEO on information security - Perform blackbox/whitebox testing for .GOVs. - Provide policy and guidance for government agencies - Deploy international network monitoring system for DHS and DoD - Create and run high speed network analysis automated lab for DHS.

Helping lead the Automox security team to implement the processes, defenses, and monitoring necessary to run a modern, secure, cloud application. - Secure AWS infrastructure - Act as security evangelist to internal and external groups - Policy development - Assist in product security

Teaching graduate courses in Information Security. Using a lab based approach students graduate with a thorough technical understanding of network security. Teaching concepts such as NIST-CSF, CIA Triad, PCI-DSS, secure coding and DFIR. Courses include: - Network Security (Pen Testing, Fundamentals of IS, GDPR, HIPAA, PCI-DSS) - Applied Network Security Lab (Vul Testing, Fuzzing, Forensics, IoT Forensics) - Secure Embedded Programming (IoT/Arduino Yun/Python/SQLite/PHP/Intel Edison) - Secure Web Programming (PHP/MySQL) - Fundamentals of Network Programming (Python) - Unix/Linux

Instructor of graduate courses in information security in CU Boulder's Interdisciplinary Telecommunications Program. Teaching a hands on approach to build the security practitioners of tomorrow.

Working to make a more secure Cloud Storage Appliance.

Research and build new tools for virus/malware detection and attributions. Leverage separate large data sources to improve detections of malicious behavior, malware and actors.