AI security and product security work, shown as proof.

Designed and authored a flagship 2026 research report on AI security engineering, using a corpus of AI and security job descriptions, role analysis…

The AI Security Engineering Field Guide is a compact, action-oriented companion for practitioners who need direct guidance — not long-form referenc…

Created a flagship AI product-security framework explaining how agentic AI changes the product-security operating model: inventory becomes the firs…

Developed a browser-native trust-boundary security model from deep assessment work on desktop browser architectures, privileged internal pages, nat…

Principal consultant at Mandiant during one of the most consequential periods in enterprise security history — deployed on Operation Aurora DFIR ef…

Delivered Splunk-focused IAM and SIEM work for Disney, debugging identity and access-control alerts, building a custom Splunk app, and creating exe…

Delivered a two-month consulting engagement for UNUM that used LLM-assisted attack-tree and attack-story generation, MITRE ATT&CK mapping, ServiceN…

Delivered a PCI DSS Level 3 compliance engagement for Caya, a forex trading and payment processing platform. Work covered scoping, cardholder data…

Delivered B2B contact intelligence, OSINT-driven contact mining, and ABM outreach campaign execution for Trada, a performance advertising platform.…

Contributed to technology delivery in a Cogstate engagement on behalf of the Australian Defence Force, where cognitive-assessment and regulated hea…

Delivered ISO 27001 information security management system (ISMS) audit and management consulting for Pathwwway, a regulated iGaming platform. Work…

Developed a NIST NICE Cyber Workforce research program focused on role language, workforce taxonomy, and cyber-workforce signal extraction, then tr…

Partnered with Splunk to build and scale the product security program, strengthen secure development practices, and create the evidence, process, a…

Led the security architecture, verification, and delivery model behind Splunkbase App Certification, transforming inconsistent security review acro…

Built and directed Forescout's Smart IoT Building security research lab — a live, instrumented environment designed to surface real-world attack pa…

Contributed to Forescout rapid response work by helping coordinate security research, product risk triage, technical validation, customer-impact an…

Led advanced security research across product security, application security, and AI risk management at ServiceNow — one of the most widely deploye…

Supported Cornerstone's FedRAMP Moderate authorization effort by helping turn formal control requirements into security policies, standards, guidel…

Led product and engineering for Syntryx, an open-source intelligence platform for multi-channel web and behavioral data, managing an 11-person team…

Supported affiliate-program growth and technical marketing by developing or contributing to machine-learning and data-driven methods for generating…

Contributed to geographic waypoint, destination inventory, and GDS cleanup work in a travel-technology environment, improving the structure, accura…

Served in a Deputy Head of Technology capacity for a Pathwwway iGaming engagement before Forescout, helping guide technology delivery, platform ope…

Conducted a deep product-security assessment of DuckDuckGo desktop browser architecture, focusing on WebView2 trust boundaries, duck:// privileged…

Built and executed Elastic/Kibana-style analytics workflows over Forescout Device Cloud data to support security research, sector-specific report f…

Contributed to Forescout connected medical-device research using Device Cloud analytics to examine segmentation failures, insecure protocols, defau…

Contributed to Forescout's Enterprise of Things Security Report research, using Device Cloud analytics and Elastic/Kibana-style workflows to help i…

Contributed to Forescout's Banking on Security financial-services research, using Device Cloud analytics and Elastic/Kibana-style workflows to help…

Contributed to Forescout operational-technology and Enterprise-of-Things research by using Device Cloud analytics and Elastic/Kibana-style workflow…

Contributed to offensive security research involving DTEN and connected-device risk, helping expose how enterprise collaboration and IoT-style devi…

Developed and contributed to Devo security research that converted customer deployment analysis, SIEM maturity patterns, detection taxonomy work, c…

Led and contributed to Devo architecture innovation work focused on SIEM reference architectures, detection taxonomy, Exchange-content validation,…

Presented Cloud Native SecurityCon North America 2023 research with Joshua Smith at Devo, analyzing 2,000 enterprise cloud detections to explain ho…