Gentle on brushesRinses with waterBiodegradableCarbon negativeWorks on all paintsMade in the U S A.

Adept at guiding teams through the human conflict in technology projects. Through understanding and engaging, we catalyze that conflict into the magic it was intended to be.

Engaged with DevOps/SRE team to improve authentication for multi-tenant cloud development.Deployed HashiCorp Vault for open source OTP support with multiple identity providers and HashiCorp Boundary to tunnel secure connections without an intermediate VPN provider.Delivered immutable OTP access control infrastructure that is cloud and identity agnostic.

Met with executives and sales and engineering leadership after a critical customer initiated product wide freeze on upgrades, fixes or new deployments.Worked with sales and engineering teams to design and deliver appropriate security artifacts, integrate BurpSuite and Nessus to the python based CI pipeline, and designed and delivered customized training for the engineering and support organizations.Restarted $50M annual revenue stream while enhancing security roadmap.Conducted a gap analysis for post-acquisition real estate startup to align roadmap securityDelivered an SMM (Security Maturity Model) based GAP analysis and updated the security roadmap. Integrated DAST and SAST into CI pipeline, CIS based near term and midterm security policy.roject that had been stalling for several years. Completed upgrades to ~80% of infrastructure with no unscheduled outages.Joined non-technical founders at a video based IoT security startup. Built ffmpeg based prototype, selected the initial hardware platform and engaged my network of entrepreneurs and software professionals to grow both the executive and technical teams.Lead backlog grooming and user story development. Debugged technical issues, broadened my knowledge of Iot video processing, product management, UX and communication skills. Integrated SAST and DAST into CI pipeline.Built user acceptance testing scripts as well as designing deployment validation test bed.Open Source: 01/2019 - present Truthiness Discovery Network: Open source blockchain designed to validate the provenance of media content Privacy Enhanced KYC service provider for digital currency transactions. Refereed first place finish at TRISHA Hackathon, 2019.

Created security auditing scripts and procedures for AWS and on-site deployments. Audited applications for security vulnerabilities utilizing static (SAST) and dynamic (DAST) analysis.Delivered secure development training for Java and C

Tested millions of lines of source code including a complete phone stack and other critical systems. Over a 3 month period, analyzed entire commercial phone stack utilizing 3 different SAST tools.Triaged and confirmed remediation for phone stack as part of a bottom-up quality improvement effort led by the CTO.

Created security auditing scripts and procedures for AWS and on-site deployments. Audited applications for security vulnerabilities utilizing static (SAST) and dynamic (DAST) analysis including manual code review of IBM's RPG programming language.Delivered secure development training for Java and C

Business Development Lead - Designing chemical technology for several high-value markets including exotic herbs, bio-pharmaceuticals, and high energy rocket fuel.

Analyzed over 10 Million lines of source code for ~25 companies. Trained approximately 50 development teams.

First Bay Area manufacturer of biodiesel from used cooking oils. Developed business plan, raised $750,000 in angel investment, supervised hiring and budgets, created sales program.

Led Nokia's ITSEC E3/C2 level assurance certification team. Completed phase I certification using a novel approach that reduced our time to market and the engineering time required by ~50%.

Responsible for implementing an Internet abuse and investigation process that improved customer relations and achieved a recidivism rate of less than 1%.

Provided secure network designs, security audits, security policy and security consulting to INS clients.Wrote and delivered user training on security systems. Developed and presented information security engagement proposals to clients

Developed hardening guides for internal and external consumption Wrote and delivered user training for internal IT consumption