Professional Experience
A timeline of high-impact roles delivering security solutions for global organizations.
RAPID7
Leading product security and DevSecOps transformation for 800+ engineers across 7 product lines. Founded and scaled the MDR business from $0 to $60M ARR.
- Architected shift from traditional AppSec to DevSecOps, implementing governance based on OWASP SAMM/DSOMM
- Developed AI-powered CVE validation agent that autonomously validates exploitability and automates risk adjustment
- Established Security Champions program with 37 engineering leads, decentralizing security ownership
- Served as Deputy CISO for 14 months, briefing Board of Directors and maintaining ISO 27001, SOC2, FedRAMP compliance
MANDIANT
Directed elite team of Principal Analysts delivering advanced threat hunting against nation-state actors. Founding member of Managed Defense service.
- Led threat hunting operations against APT groups for Fortune 50 clients
- Acted as Virtual CISO for 20 enterprise clients, translating forensic findings into executive risk strategies
- Authored technical service delivery methodology and SOPs for Mandiant Intelligent Response
- Selected speaker for MIRcon on advanced detection methodologies
INDEPENDENT R&D
Building enterprise-grade private cloud infrastructure and pioneering AI agentic workflows for autonomous systems management.
- Designed bare-metal Kubernetes cluster on Talos Linux with Cilium networking and GitOps automation
- Developed custom MCP servers enabling Claude Code to autonomously manage infrastructure
- Engineered threat intelligence pipeline using fine-tuned SLMs for MITRE ATT&CK mapping
- Built computer vision system for home automation using custom-trained image classification
Areas of Expertise
Technical and strategic capabilities honed over a decade of industry practice.
Security Program Development
- GRC Strategy
- Risk Management
- Compliance Frameworks
- Security Operations
- Product Security
Product Security
- DevSecOps Pipeline
- Application Security
- Threat Modeling
- Security Champions
- Shift-Left
Incident Response
- Digital and Live Forensics
- Incident Command and Crisis Management
- Proactive Threat Hunting
- World-Class Incident Response
- Containment and Remediation
Emerging Technologies
- AI/LLM Security
- Extensive Homelab
- Cloud Native Architecture
- Full-Stack Security Tooling
- Custom Agentic Tooling (MCP)
Future of Operations
- Agentic Workflow Design
- Automated Remediation
- Self-Healing Architecture
- Continuous Verification
- Self-Evolving Defense
Strategy, Culture & Innovation
- Organizational Design & Scaling
- Board Advisory & Reporting
- Engineering Alignment
- Innovation Guardrails
- Cross-Functional Trust
Selected Projects
Open source contributions, architectural designs, and security tools.
Claude Code Resources
A collection of custom commands, agents, hooks, and MCP configurations for enhancing Claude Code CLI workflows.
SonarQube MCP Server
Model Context Protocol server enabling AI assistants to interact with SonarQube for code quality analysis and issue remediation.
GitLab MCP Server
Model Context Protocol server for GitLab integration, enabling AI-powered repository management and CI/CD automation.
NPM MCP Server
Model Context Protocol server for Nginx Proxy Manager, enabling AI-driven reverse proxy and SSL certificate management.
Research & Insights
In-depth analysis from The Hidden Layers covering security paradigms, cryptography, and leadership.
AI and Computer Security: The Impending Doompocalypse
Wall Street thinks AI just made security vendors obsolete. After 25 years in the trenches, I think they've got it exactly backwards. Finding vulnerabilities has always been the easy part. The hard part is fixing them at scale, under pressure.
Mind your Context
I was losing 47% of my context window to overhead before Claude did any real work. Here's how I dropped that to under 1%.
Make Your Homelab AI Agent Ready
Transform your homelab into an AI-ready environment where Claude Code can safely manage infrastructure, deploy applications, and write verified code.
Subscribe to The Hidden Layers
Get quarterly briefings on security architecture, zero-trust patterns, and threat research directly to your inbox. No spam, just signal.
Join 2,500+ security professionals.