I have worked in cyber security since 2003. In the last two decades I've worked at US DoD, led teams large and small, and built
and sold a company. I am currently a Security Engineer at a big tech company,
and a
non-resident research fellow
at the Georgetown Center For Security and Emerging Technology (CSET) where I contribute to the CyberAI project.
My technical background spans software engineering (C/C++, Ruby, Java, x86, ARM), vulnerability research,
and exploit mitigation development on targets ranging from web browsers, messaging apps, embedded
game consoles, and mobile devices.
I have a strong interest in the intersection of cyber security policy,
emerging technology, and US national security. I've given guest lectures at US federal agencies, universities and companies.
I sat on the
Black Hat review board from 2012 to 2021.