Mar 2018 – Present · 8 yrs 2 mos

• Lead an amazing team of security engineers who are building and leveraging the most advanced static analysis solution in the world to analyze billions of lines of code for newly described security vulnerabilities in hours. We are transforming both secure development and incident response, and building the next template for what a Secure Development Lifecyle will look like for the industry.

Sep 2016 – Mar 2018 · 1 yr 6 mos

• Building Microsoft's strategy for secure product engineering (static analysis, dynamic analysis, feature enhancements recommendations to MS programming languages and platforms, etc.), contribute to the continuing evolution of the Microsoft SDL, participate in industry security collaborations representing MS, provide technical review of proposed security regulations and standards from external organizations, and a host of other related tasks.

Jun 2013 – Sep 2016 · 3 yrs 3 mos

• In my capacity as a Sr. Security Advisor within Trustworthy Computing, I worked with various product groups to adapt and evolve the Microsoft Secure Development Lifecycle to each organization's needs, advised on threat models and assessed security sensitive features and code, managed and oversaw third party pentesting, drove inter-organization security efforts, championed new security features within the products, and performed the Final Security Assessment for major milestones. At various points I worked with the Azure, Windows Phone and Windows Phone Services, Internet Explorer, SQL Server, and Windows organizations, as well as lead the security efforts for the Nokia Phones acquisition.
• Additionally, I helped drive the transition of the SDL from a Waterfall centric process to one that supported Agile and Continuous development cycles.