I do security things at software companies. I think the security industry kinda sucks, but in interesting and fixable ways, ex. translating from obscure vibe- and ambulance-chasing security to security as a science. Don't make me play buzzword bingo. :)
Currently, I'm a Cloud Security manager @ Amazon as part of the Threat Operations organization, and was formerly part of Application Security. My team and I are deeply ops focused and put ideas into practice in days - shifting left, fixing problems at scale, and preventing regression.
Previously, I was:
- Sr. Security Engineer, Amazon (completing an L4-through-L6 IC journey)
- Security Engineer, Vulnerability Management @ Luta Security on the Zoom contract
- Product Security Engineer @ Datto, and Software Engineer before that
I'm a nerd's nerd and spend some of my spare time on coding and security research, and either dump half- to fully-baked repos on GitHub or publish posts on my blog. If you'd like to chat or connect, you can find my social media and ways to message me on my contact page.