See everything, focus on what's real.

(Legal vehicle for consulting and Apple store software release)Provide security product, security analytic and incident detection consulting services.Released Endpoint Security Event Viewer (ESEV) as freeware MacOS ES event analyzer. Direct download and Apple Store versions. https://www.nubco.xyz/blog/esev-release/index.htmlBlog posts about MacOS Endpoint Security and other topics -> https://www.nubco.xyz

Supported multiple managers and teams of Security Partners who are product-aligned late-career security engineering leaders. They create security roadmaps, remediate security gaps, and build security programs for product teams, business units, and core infrastructure. This entails being an adaptable security SME and building trusted relationships with centralized security services, software engineering, product management, legal, privacy, integrity, and more. Other companies may title a Security Partner as a Business-unit Information Security Officer (BISO) due to the breadth of responsibility for each Security Partner.Worked with team to improve org health and revamp hiring, onboarding, expected outcomes, and per-product security posture measurement. Recruiting used our improvements as model for hiring in other teams.Created and received cross-org buy-in to restructure the security partner operating model and org structure. The new model improves time to value as well as establishes more streamlined integration points.Led efforts to create a Security-wide (500+ team members, multiple security organizations, and >100 product teams) operating model and proposed organizational re-structure. The operating model defines how the company implements, communicates, coordinates, prioritizes, and measures security success at the entire company. This provided clear guidance on the how and why of the processes and structure of the security organization, the priorities, and the expected outcomes. Used to make org, process and comms changes, it is a living document.A sampling of products and business units for which Security Partners are responsible: - WhatsApp + Messenger - Workplace - Ads - Mergers and Acquisitions - Virtual and Augmented Reality (Oculus/Glasses) - Wearables - Portal - Cloud Gaming - AI Super Cluster - Data center compute and storage - Core Infrastructure and Internal Tools - Facebook, Marketplace, ...

FireEye Innovation and Custom Engineering (ICE) divisionLed and supported 3 interdisciplinary teams of approximately 40 talented individuals that supported teams company-wide with innovation opportunities. They were seasoned managers, security researchers, innovation engineers, and data scientists (machine learning) - tackling endpoint security, network security, model learning, and data analytics. Supported direct customer needs, incident responders, detection engineers and managed defense services.Responsible for the department's vision, roadmap, strategy, execution, delivery, organizational growth, and successful integration with the broader company. We delivered numerous software projects and ML models to several products and organizations throughout the company. The projects delivered material impact to production products. Sample successes are an ML model that was responsible for contributing to $35M in sales in a $100MM product and an endpoint product was continuously deployed to ~1M endpoints on a recurring monthly basis.Supported executive leadership with product innovation, translating complex research concepts into tangible, market-ready solutions. Participated in Quarterly Business Reviews and other executive leadership off-sites.Supported corporate development team as an engineering and security expert, assisting in the review of potential partnerships and acquisitions.Responsible for team member career and technical growth through mentorship, coaching, and opportunity creation.Created and led a data and engineering architecture ambassador program that supported company-wide efforts related to data and product architecture.Keywords: Machine Learning, Data Science, OS Security, Leadership, Management, Incident Response, Endpoint Security

1st non-founding employeeResponsible for foundational network security research and creation of POC product delivered to early development partners proving core product ideas.Maintained a role in product definition, design, and user research. Worked closely with early clients.

A principal Malware Analysis team member performing Reverse Engineering and mentoring new reverse engineers and researchers.Matrixed across the entire company performing: • Incident Response Consulting • Training Classes • Endpoint Security • Malware Analysis • Network Security • ResearchCustom Engineering • Led development for ~20 tools used by consultants; several were integrated into shipping products • Frequency analysis (prevalence), Windows and OS X kernel drivers, OS X Cocoa GUI, Network Analysis, IDA plugins, MIR extensions, and more. • Led ideation, development, and release of Memoryze for Mac as a freeware download tool. A tool used for live memory extraction, memory forensics, and analysis.Taught classes at BlackHat as well as on-site for customers - including course material creation • Advanced Malware Reversing Engineering • Intermediate Malware Reversing Engineering • Binary Triage • Using Mandiant Intelligent Response (MIR)Keywords: IDAPro, C, Python, Cocoa, Objective-C, MySQL, Redis