If my site was down, it was probably DNS.

• AI Red Teaming

  Led adversarial assessments of production LLM platforms and delivered technical findings, risk reduction insights, and executive reporting.

• Web Application Security

  Penetration tested web applications and APIs, ran dynamic scanning and software composition analysis, and managed a vulnerability disclosure program from intake through validation, remediation, and closure.

• Cloud Security

  Assessed cloud storage, identity, and network configuration against secure baselines, including access policy and privileged role review, and drove the findings to remediation with engineering teams.

• Detection Engineering

  Identified critical telemetry and monitoring gaps, then built detections and reporting that made blind spots visible and actionable.

• Data Protection

  Designed data protection programs across discovery, endpoint controls, and egress monitoring, including safeguards for generative AI services.

• Security Automation

  Replaced repetitive remediation and system recovery work with scripted workflows that improved speed, consistency, and operational reliability.

• Roll Call

  A Claude Code plugin that turns agentic coding into an engineering pipeline, with change control and routing to the right part of the dev stack built in.

• cyber microlabs

  Browser-contained lab instances for hands-on security practice, deliberately much smaller in breadth than the large platforms and pitched at the beginner level.

• Writing

  Books under my own name, in nonfiction and fiction. Everything published is on the author page, which stays current as the catalog grows.

See all projects