I've spent the last several years building and scaling high-performing security engineering organizations, developing my leadership style, growing teams, and refining my scope as a security leader. My background is in Software Engineering and I carry those principles and lessons into the security space. I'm a strategic, technically fluent leader who builds cultures where excellent engineers want to stay and grow.
Looking for my next chapter at a company where security is a competitive advantage waiting to be built, not a checkbox. I'm most interested in places where my technical background and leadership experience can both show up, and where strong security leadership can shift the strategic trajectory of the business.
- Led the transition from a homegrown identity provider and SSO to a modern vendor-based stack, migrating over 10,000 applications, increasing reliability to support Live Event streaming, and saving the company over $1M in engineering costs
- Drove Netflix-wide transition to phishing-resistant passwordless authentication and modern endpoint management for all employees and contractors, reducing idle access by 93% as part of a broader incident mitigation and risk reduction strategy
- Served as leadership organizer and sponsor for Netflix's partnership with Okta and Auth0 to build the Agent Identity solution on their new AGT offering, including a permission attenuation control that constrains agent access to sensitive actions, in support of Netflix's north star of securely deploying millions of AI agents
- Built and led the engineering teams behind Hillary for America's data collection and donations platforms, powering over $700M in online fundraising in support of the first woman nominated for President of the United States by a major party
Built and scaled Netflix's Security Services Engineering organization, encompassing the full breadth of workforce and product security: from identity and access control to cryptography and workload identity across Netflix's global footprint.
- Scaled the SSE organization from roughly 20 to 52 people across seven specialized teams: Identity & Authentication Security, Access Control Engineering, Access Experience Engineering, Cryptography Services, Workload Identity / Platform Security, Identity Integrations and Product Management
- Led the integration of Netflix subsidiaries into the Netflix identity and access ecosystem for the first time, managing identity across home and Netflix environments and developing playbooks to support future M&A activity at scale
- Created an Agentic Identity and Access Control program, supporting innovative work to create visibility and risk management for Netflix AI Agents
- Regularly engaged C-suite and VP-level stakeholders on security risk posture, translating complex technical challenges into business-level investment decisions and multi-year roadmaps
Responsible for managing an engineering-driven Application Security team at Cruise, charged with securing all Cruise-built applications utilizing approaches ranging from code-level assessments to automated security tooling.
- Worked with Security, Engineering, and Legal stakeholders to build quarterly and yearly team strategies to secure all Cruise-built applications and services
- Built out metrics-driven project plans including vulnerability discovery through pre & post deployment automation (static analysis, template-based scanning & supply chain audits) as well as manual source-level application assessments
- Led threat modeling of developer workflows and engineering support tooling
- Managed a broad team of Security Engineers including regular performance feedback, bi-yearly reviews and promotion planning
Worked with the Cory Booker 2020 Presidential Campaign to support their digital strategy and improve digital security posture.
- Worked with campaign leadership, vendors and agencies to develop a strong campaign security posture and response guidelines
- Served as a key member of the campaign's cybersecurity incident response team
- Created a reusable component library based on the Cory 2020 style guide using Twig templates, SASS and ES6 Javascript bundled with Parcel.js
- Responsible for building corybooker.com, allowing digital staffers to update and create new policy pages and other content to advance campaign strategy
Served as the e-commerce engineering lead, managing three teams of developers building applications across e-commerce marketing, conversion & platform. Creator of the Application Security discipline within the Engineering org.
- Owned the client technology vision, strategy and architecture to support a fast-paced e-commerce organization
- Worked with leadership to develop and adopt yearly and quarterly roadmaps to reach company goals
- Led efforts to introduce security tooling and process into the SDLC (e.g. managing dependency vulnerabilities via Snyk)
- Created a public bug bounty program, leading to the creation of internal application security processes, education, and hiring
- Developed the hiring pipeline for software engineers, security engineers, and other roles across the organization, building out interview processes and career ladders from scratch
Served as both tech lead and people manager for the campaign Fundraising team. Responsible for donations and signups, e-commerce, and internal tooling.
- Developed hiring plans and grew the Fundraising team from two Engineers to nine in a year
- Led the team through over a dozen major projects on tight, campaign-driven deadlines
- Oversaw key architectural decisions, including the adoption of server rendering and custom frameworks to improve front-end performance
- Acted as technical leader to run key planning and prioritization with the Product, Finance and Digital Marketing teams
- Established development planning processes, technical guidelines and release standards to meet deadlines, maintain code quality and ensure product reliability
- Conducted performance reviews for direct reports to give actionable feedback and title adjustments
Worked on the Predictive Analytics and Web Platform teams to develop interactive data visualizations for Optimizely's Personalization product.
Began with a front-end role and moved across the technical stack, implementing everything from infrastructure to product and API features.
Developed features for the core product (a marketing automation tool) as well as the architecture for a custom PHP framework.
Co-organizer and challenge designer for HackFortress, a traveling competition held at DEF CON and ShmooCon for nearly 10 years. A tournament-style event pairing gamers playing Team Fortress 2 with hackers solving security challenges across forensics, networking, encryption and web security.
- Led the development of web security challenges involving combinations of client & server vulnerabilities in a variety of platforms such as Ruby, Node.js and PHP
- Built a reusable style & component library for use in web application challenges
Graduated with a Bachelor of Science in Information Technology with concentrations in Computer Science and a minor in Political Science.