Feb 2024 – Sep 2025 · 1 yr 7 mos · Bellevue, Washington, United States · On-site

• Area Security leader for ByteDance's e-commerce (TikTok Shop) play. Interviewed, hired, and trained large team, in a 6-month rapid build surge. Designed adaptive controls to balance risk and growth.

Oct 2021 – Nov 2023 · 2 yrs 1 mo

• Cut ATO and fake account rates by 80–85%, supported growth to ~800M MAU (up 200M), and rebuilt platform credibility, positioning Snap as a formidable target to adversaries.

Mar 2018 – Sep 2021 · 3 yrs 6 mos · Washington, United States

• Successfully petitioned my Director and VP leadership to let me create a product management function for Amazon Identity Services. Established standards and controls that continue to define Amazon Identity’s technical foundation and security posture.

Aug 2016 – Dec 2017 · 1 yr 4 mos

• Delivered mechanisms to identify, track, and mitigate automated accounts, with a core focus on disrupting nation state disinformation campaigns.

Jul 2014 – Jul 2016 · 2 yrs · Greater Seattle Area

• Managed security assurance for Amazon’s global Identity and Transaction Risk Management System (TRMS) orgs, spanning retail and AWS at billion-account scale.

Jul 2013 – Jul 2014 · 1 yr

• Identified and tracked a fraud gang responsible for over $4b in fraudulent tax returns in a single year. Worked closely with IRS on ways to share fraud signals from Intuit to help proactively identify the accounts likely submitting a Stolen Identity Refund Fraud (SIRF) return.
• https://krebsonsecurity.com/2015/02/turbotaxs-anti-fraud-efforts-under-scrutiny/

Apr 2010 – Jul 2013 · 3 yrs 3 mos

• Product Manager responsible for the security of a banking platform used by 1800+ financial institutions. Invented Transaction Intent Verification (TIV) authentication method, which allowed us to not just increase assurance that the correct user was involved with the transaction (e.g. password + otp), but that the details of the transaction actually mathed the uer's intent (Are you sending $500 to Bob Smith?).

Jan 2006 – Dec 2009 · 3 yrs 11 mos · Sweden

• Was the Chief Security Officer (CSO) for Outpost24 post acquisition. Spokesman, head of product duties. Participated in our growth from 4 countries to over 20 countries in this time.

Jan 2003 – Dec 2005 · 2 yrs 11 mos

• Founded a penetration testing company. Got paid to break into some of the worlds largest companies. Grew from 1 to 10 employees before being acquired for our software IP.
• In 2003 we created Unicornscan (presented on it in 2005 at defcon: https://www.youtube.com/watch?v=ZdCEo6yoEWA) , which was one of the 1st port scanners that could complete full TCP socket connections with custom payloads, recording results in a database, at internet scale (Under 24 hours for full IPv4 IP space, single port). This allowed us, when a new CVE came out, to query our local dataset and estimate what percentage of the internet might be vulnerable to it. Long before https://www.shodan.io/ et al.