Truework verifies income and employment to create trust in every financial transaction.I built out and led Truework’s team of talented software engineers and data scientists through the company’s series B & C funding rounds, scaling the team to to 24 including two managers and several key technical leaders. I also later planned and executed RIFs to achieve company financial targets while maintaining morale, minimizing regretted attrition, and continuing to ship.Additional accomplishments include:• Establishing practices and standards for reliability and delivering an API to enterprise customers: measuring and setting targets for reliability and performance, establishing an on-call process, and improving the company’s incident management process resulting in a • Defining and reinforcing the culture and operating practices of the engineering and EPD teams, including establishing practical operating principles, recognizing and celebrating shipping product improvements, and building connectivity between engineering and product/GTM to understand the customer.• Building out the processes and scaffolding for a healthy and scalable engineering org: roles and career levels, compensation and performance reviews including calibrations and promotions, org and headcount planning, and a technical interview process.• As an executive team member, ensuring alignment on incentives and product strategy, as well and driving company-wide improvements to promotions & performance review, compensation, etc.Post-RIFs I’ve had a chance to be more hands-on as well, writing and reviewing Python code in our Django codebase.

After building and leading Lyft's security team for three years, including helping to hire a CISO and other engineering managers, I decided to take break from security leadership. I'm proud to say Lyft never suffered a breach or significant security incident during my time, but running security at a fast-moving and rapidly-growing company takes a lot of energy. I returned to infrastructure-focused software engineering to tackle some IPO readiness projects.My major accomplishments include:• Designing, implementing, and managing the rollout of improvements to our production access authorization systems to ensure narrowly-scoped and just-in-time access to production systems by authorized engineers. Self-service access inquiry and escalation reduced security operations ticket workload by 15-20%.• Designing and prototyping the adoption and deployment of Terraform and Terraform Enterprise for AWS resource orchestration at Lyft to reduce orchestration risk, improve orchestration user experience, and improve orchestration tooling privilege isolation and security.• Acting as incident commander to lead the response to and resolution of several critical internal incidents involving broad stakeholder groups.

I was Lyft’s first security hire, and built and led Lyft’s security program and team during a period of rapid growth of both the engineering team and Lyft's business/ride volume.My major accomplishments include:• Growing the Lyft Security Engineering team from 0 to 7 employees through internal and external recruiting, developing the team's capabilities through mentorship and feedback, and successfully promoting 2 team members.• Building out the broader Lyft security org, including hiring a CISO, engineering managers, and other security function leaders (GRC, etc.).• Leading and influencing efforts to deploy engineering-driven foundational security improvements at Lyft across three security program pillars: application security (e.g. common secure-by-default libraries, static analysis for common flaws in CI pipeline), infrastructure security (e.g. AWS account isolation & privilege reduction, multifactor authentication across all access modes), and detection & response (e.g. central event logging & alerting, kernel-level system instrumentation).• Identifying, triaging & tracking security risks facing the company, communicating those risks to engineering leadership, and developing strategies and plans to reduce these risks.• Building relationships with stakeholders, identifying stakeholder needs from security, and providing support (tools, consulting & incident response support) to enable stakeholders in infrastructure & product engineering, IT, legal/compliance, strategic partnerships, and sales.• Working with our engineers to open-source and speak publicly about some of the tools we developed: https://github.com/lyft/confidant, https://github.com/lyft/bandit-high-entropy-string, and https://github.com/lyft/python-blessclient (and our fork of netflix/bless)

I was an early Stripe engineer and wore several hats in my time at Stripe. I primarily contributed to several major engineering projects across security, infrastructure, and fraud prevention, but also supported company growth through recruiting and interviewing, evangelism and sales support, and customer support.My major accomplishments include:• Founding Stripe’s security team to keep Stripe’s systems trustworthy and secure. We reviewed and responded to vulnerability reports, analyzed internal systems, responded to incidents (including several major OpenSSL vulnerabilities and account takeovers) and built systems and tools to improve Stripe’s security.• Sharding Stripe's datastores to scale transaction volume by moving from 1 to N logical databases. We rolled out this change in advance of Cyber Monday 2013 with no downtime or customer impact.• Building and improving tools for merchant onboarding and underwriting at Stripe. We attempted to automate processes as much as possible and helped improve the efficiency of human analysts.

I led engineering efforts to scale and deploy Project BISmark [1], a broadband & home network measurement platform to study the performance of broadband access networks from the vantage point of the home router.I contributed significantly to the development and widespread deployment of the project, including:• Designed and built or improved numerous systems, including OpenWRT router firmware build, router management service, router package update system, wide-scale deployment of measurement servers and routers, and devops related to the measurement and management systems.• Primary developer of the "product” and user-facing materials, including project website, on-router user interfaces, documentation, graphics, and stickers.[1] https://web.archive.org/web/20121130143526/http://projectbismark.net/

I engaged in several research projects in the Advanced Network Architecture group. For my Masters thesis I devised and executed an original study on routing table growth and collective action amongst ISPs, involving building and debugging tools for processing, analyzing, and visualizing 13 years of BGP routing table data. I also set up a testbed and created exploratory applications for a non-IP-based publish/subscribe network architecture.I also worked on several interesting projects related to my graduate coursework: I designed and built a cloud-based distributed data stream processing system for Twitter stream data for Database Systems (6.830). I enhanced the Python virtual machine to allow safe execution of untrusted code with minimal modification for Computer Systems Security (6.858). I conducted an AS-level Internet topology “traceroute” study using public data sources and infrastructure for Computer Networks (6.829)