Mar 2026 – Present · 2 mos

Mar 2023 – Feb 2026 · 2 yrs 11 mos

• Led product security for Copilot product suite, reducing review timelines from several weeks to less than one week by coordinating multiple security and compliance teams
• Created internal application security standard for internal Golang, JavaScript, and AI applications to proactively enforce and educate developers on compliance and security requirements
• Developed several internal auditing tools to identify code and infrastructure errors in CI, using CodeQL, tfsec and Brakeman, identifying an average of 10 vulnerabilities a day
• Designed internal Security Portal and created internal security standard for all Golang, JavaScript and AI applications, increasing speed of security requirement generation from two weeks to self service process of less than three hours

Feb 2020 – Mar 2023 · 3 yrs 1 mo

• Built Rails application to automate vulnerability lifecycle management, tracking and assisting with prioritization of over 1000 vulnerabilities with FEDRAMP POAM reporting functionality
• Developed and maintained a Go-based backend job system to monitor for emerging threats to the business, preventing over 20 valid bounty reports a year
• Conducted acquisition security review of npm, performing multiple technical reviews and risk assessments of entire architecture and infrastructure to surface technical debt and compliance issues to inform acquisition timeline and remediation efforts
• Managed Bug Bounty program by triaging and remediating vulnerabilities, including organizing and running private bounty engagements with over 30 private bounty hunters
• Led threat modeling, design reviews and security testing for over 100 new feature launches