Teaching graduate-level Secure Programming course in the Computer Science and Engineering (CSE) department.◼ Developed curriculum for course including lecture material, assignments, projects, and exams. Incorporated both offensive and defensive cybersecurity techniques into the material, following an offense-informed defense strategy. During lectures, provided lots of hands on demonstrations of vulnerabilities and attacks against them.◼ Average enrollment each semester is 40 students. Course is offered every Fall and Spring semester.◼ Student survey feedback has been extremely positive every semester (average score each semester around ~4.2/5.0).

As the security and privacy compliance lead for the Microsoft Personnel team, I designed and implemented security countermeasures in cloud-based application. I was responsible for finding and mitigating vulnerabilities, as well as leading security design and implementation reviews. Under my leadership, Microsoft Personnel became a model for security best practices, leading the way in aligning with Microsoft's security-focused strategy. At peak, my team consisted of two full-time employees and two contract employees.I identified vulnerabilities and oversaw the implementation of mitigations and remediations. I collaborated with adjacent teams, providing security best practices guidance and proposing solutions to address security compliance findings.I developed a hardened kiosk (achieved a SCAP score of 95) for reservation check-in/check-out, with an automated provisioning process built into our DevOps pipeline. The Azure Red Team's 4-hour attempt to breach it was unsuccessful, earning an overwhelming approval of the device's security posture. I also developed and implemented a device authentication solution for secure messaging between the kiosks and the backend services, using the kiosk's TPM as an anchor.As part of the blue team, I led multiple engagements against the Azure Red Team, earning praise for my positive attitude and exceptional collaboration during debriefs and remediation of findings.To streamline GDPR compliance, I developed tooling for annotating the data model with privacy tags, significantly reducing the time required to generate artifacts for the compliance tracking tool. I socialized this tool with adjacent teams and the GDPR compliance tooling team to facilitate wider adoption across the organization.Throughout my tenure, I maintained threat models and performed semi-annual threat model reviews with the security assurance team. I also conducted Security Development Lifecycle (SDL) compliance assessments and annual privacy reviews.

In Skunk Works®, leading a team of 5 responsible for cybersecurity design and architecture on the Cybersecurity Engineering team for a program. Handpicked by management for the program during proposal effort. Since contract award, am continuing to provide technical leadership through ongoing design and architecture maturation and overseeing implementation of security functionality, cryptography, and protection technologies on embedded systems.◼ Subject matter expert for security-relevant technical concerns in overall architecture, design, and requirements development for the system. Successfully developing affordable solution that meets requirements, including secure boot using TPMs, Intel TXT, data-at-rest encryption, and signatures.◼ Responsible for developing deliverable documentation.◼ Presenting technical material at program milestone events. No major concerns and very positive customer response.◼ Very positive comments given on presenting skills and effectiveness from outside coaching consultant.◼ Attending Technical Interchange Meetings and milestone events with suppliers to facilitate knowledge sharing and provide support for cybersecurity concerns.◼ Participate in working groups to mature design and requirements in various critical multi-discipline functional threads.◼ Mentoring 3 cybersecurity team members.◼ Lead effort to create hacking exercise used at LM Summer Cyber Camp for visiting high school students. Setup vulnerable computers, wrote step-by-step instructions for students to use, and created and presented lecture material to educate on fundamentals of hacking. Excellent student engagement with very positive feedback from both students and team members.◼ 1 of 30 employees chosen to participate in Texas A&M partnership leading to Cybersecurity Specialization Certificate after completion of 5 classes.◼ 1 of 15 LM employees who completed all challenges in corporate capture the flag hacking competition (only 1 of 2 to finish at LM Aero).

In Skunk Works®, served as Weapon Systems Build Architect with responsibility for architecting, designing, and leading implementation of automated software delivery pipeline to accelerate the maturation and delivery of software to airborne platforms. Team employed an agile methodology at scale for large programs.Led a team of developers to implement enterprise build automation across multiple programs to rapidly deploy reusable, scalable, proven solutions that built and delivered software efficiently. In this role, successfully demonstrated the ability to reuse an existing enterprise automated build system (JASPER), in production use on the F-35 program, on a new program that is spread across multiple sites, while simultaneously incorporating industry best practices and open source solutions.Provided software configuration management (SCM) tool administration, support, training, and expertise to all team members for ClearCase and Git. Designed repository structure, provisioned all of the initial repositories and worked with the teams to import stable baselines of all products to support CM-driven workflows and build processes. With no prior experience with either tool, reached an advanced level of proficiency within a few months.Served as a consultant to multiple programs in cross-organizational improvement initiatives. This led to a sustained 2X improvement in system build yield.Nominated and accepted into Rising Technical Talent (RTT) program within Lockheed Martin, a preparatory program on the path to fellowship.

For the F-35 program, served as Software Architect and Lead Developer for automated software build processes. In this role, spearheaded the design and development of a new enterprise software build process (called JASPER) that is being used to build Mission Systems Software for delivery to labs and production aircraft.Led a team of 2-3 software engineers in the JASPER effort, over the span of more than a year, from initial concept to full production. Leading up to the successful production deployment, actively coordinated across multiple teams within the program as well as outside organizations. Developed and delivered training to teams across the program.JASPER achieved success in its first five months of production. Due to its process efficiency and automation improvements, build capacity improved by 206% on average with spikes of up to 500% and productivity and efficiency increased by 94%. Within the first five months, build errors were reduced by 91%. In addition, the containment of defects from inputs to the build process improved with a total of 54 saves. JASPER is used to build a system consisting of roughly 9 million lines of code.Supported build operations by acting as primary build operator in several builds, overseeing the build process execution and delivery. Provided build troubleshooting to developers and testers as necessary to resolve issues.

On the F-16 program, served as a software developer on the Mission Software team, supporting development across multiple areas of the Operational Flight Program (OFP) for the primary mission computer.Contributed software engineering expertise in the development of product updates through the software lifecycle after receipt of requirements, performing object-oriented analysis, design, coding, and testing tasks to implement various capabilities.Served on the Universal Armament Interface (UAI) Tiger Team to assist in risk reduction of incorporating such a huge capability into the product. In this role, developed tools to easily manage mission planned data for testing various permutations of UAI weapons, thus significantly reducing the time (on the order of weeks) needed to produce good mission planned data for testing.Responsible for 90% of the design and implementation of Weapon Data Link (part of the Universal Armament Interface capability). Our design was well structured, maintainable, and served as a basis for reuse on other programs such as F-35. Through this effort, I was able to accumulate a deep understanding of WDL which allowed me to help find issues in the external requirements, help improve our system and subsystem requirements, and share knowledge with others on the capability.Added a long desired capability to have power cycles supported in the simulated version of the OFP that runs on workstations. Within a single day, provided the team a capability that allowed power cycle testing to be performed on their desktop instead of on the resource limited target-based test stations.As part of a migration study from the retired Sun SPARC workstation platform, performed all necessary build process and product changes to support building and testing our product on a Linux x86 platform without affecting execution on the embedded target. This task was accomplished in only 2-3 weeks, which exceeded all expectations.

On the F-16 program, served as a software developer on the Mission Software team, supporting development across multiple areas of the Operational Flight Program (OFP) for the primary mission computer.Contributed software engineering expertise in the development of product updates through the software lifecycle after receipt of requirements, performing object-oriented analysis, design, coding, and testing tasks to implement various capabilities.Chief architect and lead developer on the build process for the product. Implemented an entirely new automated build process for the product that greatly reduced the time and effort required to produce a build and significantly increased the build capacity so more builds could be performed with fewer resources. The new process was easily understood by others and would take only a few hours to learn, compared with an old process that was understandable by one person and took months to learn.As developer on the middleware and infrastructure portions of the product, contributed to a major effort to convert all code from Ada 83 running on a proprietary Raytheon RTOS to Ada95 running on the INTEGRITY RTOS from Green Hills Software.

- Worked on the Major Account Engineering team.- Purpose of team is to perform custom engineering of best practices for large corporate accounts in the areas of unattended scripted installs and image-based installs of Microsoft Windows operating systems on Dell machines.

- Worked on the Windows Server Engineering Team for Home Office and Distribution Centers- Long-term project was developing a completely automated deployment solution for Windows NT and Windows 2000 servers- Developed management tools using Visual Basic and Visual C++- Created team graphics and established team web page