Developed Cruise’s vulnerability and security misconfiguration detection capabilities across Kubernetes, container, and cloud workloads, implementing new scanning controls and processes to remediate risks.Implemented system hardening and configuration scanning capabilities across IT systems, standardizing and bringing visibility into security configurations across endpoints, development environments and servers.Drove several risk reducing initiatives at the company, including but not limited to:• overhauling Google Drive sharing policy, securing both internal and external sharing defaults.• developing and managing the security risk exception and third party vendor risk assessment processes.• migrating the company to a trusted enterprise password manager.

Prior to my promotion to Engineering Manager, I built Cruise's Vulnerability Management program, where as the team’s inaugural engineer, I built capabilities to identify, prioritize, report on, and remediate critical vulnerabilities across all endpoints, enterprise servers, and development environments.

Led Salesforce's GovCloud Threat & Vulnerability Management team, driving the vulnerability management program to achieve compliance with FedRAMP, PCI, DoD IL4, HITRUST, and ISO 27001 requirements.Established daily executive-level reporting on critical vulnerabilities, empowering engineering directors and VPs with real-time insights to prioritize and expedite remediation.Managed vulnerability scanning tooling with visibility across 1M+ assets and 300+ web services.

Developed Network Access Control capabilities using ForeScout CounterACT to identify, quarantine and attempt remediation of ‘unhealthy’ or non-security compliant endpoints on Sony’s trusted network.Implemented tailored CIS configuration baselines and compliance monitoring across endpoints, development environments and servers.

Developed automated patch management, configuration management, host provisioning, application delivery, and new user provisioning processes for Apple’s largest Windows endpoint and server fleet.