Led Lenovo's Product Security Office, which was responsible for the security development lifecycle architecture, foundational security training, supplier security program assessment, and product security incident response (PSIRT).

Provided technical leadership for company-wide Product Security Incident Response Team (PSIRT). Assessed and triaged vulnerability reports from industry partners, security researchers, internal security testers, and customers. Collaborated with industry partners, and competitors in some cases, to create an effective response and coordinate disclosure. Worked with development teams, product support teams, and suppliers to implement mitigations. Wrote and published Lenovo's public security advisories.

Provided technical leadership for team developing open source-based private cloud solutions. Worked with OpenStack (Red Hat OpenStack Platform), Ceph, Gluster, Ansible, and ManageIQ/CloudForms. Used Red Hat Virtualization (RHVH + RHVM) to host both cloud infrastructure and user workloads.Developed hardware management innovations with server BMCs (Lenovo's Integrated Management Module) and Lenovo XClarity.Designed, assembled, and operated a small research data center with 42+ 2U & 1U servers, 12 switches, and related network cabling and power distribution infrastructure. Managed server multitenancy with virt-manager and virsh in a mixed environment of Ubuntu Server and CentOS nodes.

Provided technical leadership for pen input innovation team. Work ultimately resulted in Lenovo's WriteIt product for handwritten input to non-handwriting-enabled applications [1]. Worked with Wacom to bring their AES (Active Electrostatic) pen technology to market on Lenovo systems. Founding participant in the Universal Stylus Initiative [2] active pen standards body. Led evaluation of pen tip and screen materials for writing feel, in collaboration with Lenovo's user experience teamStoryboarded tablet off-screen writing concept, assisted hardware team to integrate and optimize ultrasonic pen, developed "Continuous Ink" application to capture and replay strokes. Demonstrated prototype for partners and customers at Mobile World Congress 2014.Led team that developed the X1 Hybrid switching software, including components in Windows, Android, and the embedded controller [3].[1] https://www.youtube.com/watch?v=z83cWyvSrpc[2] http://www.universalstylus.org/[3] http://www.theverge.com/ces/2012/1/8/2692349/x1-hybrid-hands-on

Developed 3G auto-connection scripts and graphics performance assessment methods for Lenovo Skylight smartbook [1]. Assembled toolchain and built OS for Windows-Android Hybrid PC concept demonstrator.[1] https://en.wikipedia.org/wiki/Lenovo_Skylight

Architected maintenance tools for Lenovo's first enterprise-class server family, including offline and online firmware updating, and operating system device driver updating for Window Server, Red Hat Linux, and SUSE Linux.Responsible for minimum BIOS specification across all desktop and mobile system families. Maintained and extended BIOS validity verification tool.Investigated alternatives to legacy code repository tool, ultimately recommending replacement with Subversion.

Led implementation of PC virtualization solution developed in partnership with Intel.Implemented Hardware Password Reset tool for securely resetting firmware and HDD passwords on ThinkPad laptops.Designed and implemented BIOS-based PC function entitlement scheme.Investigated alternatives to legacy defect tracking tool, ultimately recommending replacement with Bugzilla.

Developed personal computer BIOS cryptographic measurement and signature verification tool, including a Window device driver to provide access to the BIOS code blocks.Developed tool to install OS pre-boot environment by laying down boot image as a file, decoding NTFS block structure for the file, and building a secondary directory structure used by boot loader to launch pre-boot environment.Developed Python tool to assemble PC recovery image in-situ from OS components present on the system.Developed workflow tool to specify and prepare factory preload images of operating systems and applications for personal computers, using Java, Apache Tomcat, and DB2 relational database.

Tracked IBM and supplier submissions through Microsoft's HW and device driver certification process. Investigated testing failures and initiated mitigation plans. Summarized requirements and guided development teams.

Managed integration of personal computer peripherals, including multimedia remote controls, telephony modems, ADSL modems, and a PC-based videophone system. Demonstrated videophone at 1997 CES and Presidential inaugural event.

Responsible for manufacturing test process for PS/1 and Aptiva personal computer brands world-wide.

Developed machine-vision based semiconductor testing equipment. Responsible for semiconductor wafer dicing and quartz glass mask plate dicing operations, wafer washing operations, and chip carrier verification.