I'm a Security Engineering Manager at Microsoft, working to keep Microsoft Cloud customers protected and productive. I'm deeply passionate about people and security, and love to learn and share things related to security.
- 🌩️ I currently work in the Cloud Security organization at Microsoft, leading an AI-native team of Security Engineers protecting the Microsoft Cloud.
-
🛠️ I led the design, development and open-sourcing of Microsoft's
AntiSSRFsecure code libraries that protect online services against SSRF risk. -
🎙️ I have been a guest on Microsoft's BlueHat Podcast, sharing my journey from Software Engineer to Security Engineer.
-
👨🏫 I co-delivered a workshop on leveraging AI with SAST, at DEF CON 32 and BSides Seattle 2026.
-
🎤 I presented multiple talks, including at DEF CON 29 ("AppSec 101: A Journey from Engineer to Hacker"), at the National Cybersecurity Alliance Convene in Seattle educating cybersecurity awareness professionals about AppSec, and numerous talks internal to my employer.
-
🤖 I have written papers on using GenAI to help prioritize triage of SAST results as well as Elevating Code Security and Reliability via LLM-Augmented Static Analysis
-
✍️ I have written an article that captures the Learning & Development program I helped institute within Microsoft, that is published in the ISACA Journal.
-
📚 A short Sci-Fi story I wrote won the 2nd place in the 2020 DEF CON Short Story contest.
- You can find the story on Apple Books and on GitHub.
-
👨💻 Open-source MCP Servers for
curl,grepandjq, allowing conversational invocation of these utilities. -
🔁 gURL, a SwiftUI app for macOS that is a native macOS GUI for cURL.
-
📚 Sources, a SwiftUI app for macOS that is a clean, modern RSS Reader.
-
📱 AntiSocial, an iOS app that allows you to block tracking from popular social networks. The app is also open source on GitHub.