Jan 2025 – Present · 1 yr 4 mos

Jan 2023 – Jan 2025 · 2 yrs · Washington, District of Columbia, United States

• Leading several of CISA high-priority initiatives, including Secure by Design and open source software security.
• Led development of CISA's Secure by Design pledge, securing commitments from 250 of the world’s largest technology manufacturers to measurably improve software security.

Jan 2022 – Oct 2022 · 9 mos · Washington, District of Columbia, United States

• 2022 TechCongress Fellow for the Senate Homeland Security and Governmental Affairs Committee under Chairman Gary C. Peters.
• Advised on policy regarding cybersecurity and other technology policy issues.
• Led Chairman Peters’s legislative approach to open source software security and election security, including writing the bipartisan Securing Open Source Software Act.

May 2021 – Feb 2022 · 9 mos · Washington, District of Columbia, United States

• Technical lead on purple team engagements (including Fortune 500 companies), simulating nation-state attacks to help drive down risk in corporate environments.
• Responded to prominent cyberattacks as technical lead, working directly with executives to drive corporate response to improve security going forward.

Jun 2020 – Jan 2021 · 7 mos

• Led development and deployment of CISA's first passive, opt-out vulnerability scanning program with Crossfeed, assessing all 50 states and over 2,500 counties ahead of the 2020 election.
• Authored and contributed to guidance on vulnerability disclosure and other public technical election security guidance.
• Represented the agency in official public speaking engagements (including at DC CyberTalks, CISA Cybersecurity Summit, and DEF CON Voting Village).

Sep 2019 – Jun 2021 · 1 yr 9 mos

• Research Assistant at Stanford Internet Observatory and Head Teaching Assistant for INTLPOL 268: Hack Lab.

Jun 2019 – Aug 2019 · 2 mos

• Contributed full-stack development to help build Vanta’s automated compliance platform, including development of custom security scanners and Vanta's first customer-facing desktop application for its deployed security tool.

Jun 2018 – Jan 2022 · 3 yrs 7 mos

• Worked at Defense Digital Service full time (June 2018 - September 2018) and in an advisory capacity following that.
• Helped lead the Hack the Marine Corps bug bounty challenge, in coordination with Marine Corps Forces Cyberspace Command leadership.
• Coordinated deployment of Crossfeed tool to help secure COVID-19 vaccine entities.
• Served as ongoing advisor to the Department of Defense's Hack the Pentagon bug bounty portfolio and vulnerability disclosure program.

Jun 2018 – Jun 2018 · 0 mo · Greater Chicago Area

• Intern on the Uptake Hackers and Hunters team, testing internal applications for web vulnerabilities. Filed vulnerability reports for review and created a penetration test report summarizing findings.

Mar 2018 – Apr 2018 · 1 mo

• Security Consultant at Earn.com

Feb 2018 – Dec 2020 · 2 yrs 10 mos

• Member of the Synack Red Team, participating in various private bug bounty programs.

Jun 2017 – Jul 2017 · 1 mo · Greater Chicago Area

• Worked as a web development intern at Dom & Tom, a development agency, writing production code for an internal tool. Technologies include React, Node.js, MongoDB, Docker, npm, and Express.

Sep 2016 – Jul 2019 · 2 yrs 10 mos

• Created a service for seniors and others without smartphones to order an Uber with a phone call. Built using Node.js, AngularJS, and MongoDB, Twilio API, and Uber API.

May 2016 – Aug 2016 · 3 mos

• Worked as a software engineering intern at SnapMobile, a mobile app development company, writing production code for universal mobile applications, web applications, and APIs. Developed mobile applications in IonicJS, mobile applications using AngularJS, and APIs using Node.js, MongoDB, npm, Express, gulp, and Babel. Collaboratively developed these applications, using GitHub for source control.

Nov 2015 – Dec 2020 · 5 yrs 1 mo

• Ranked within top 100 hackers worldwide on HackerOne and Cobalt bug bounty platforms.
• Reported over 350 valid vulnerabilities to organizations including Google, Yahoo, Facebook, Uber, Salesforce, and the United States Department of Defense.
• Placed first in the federal Hack the Air Force challenge out of 600 invited hackers.

Oct 2015 – Dec 2017 · 2 yrs 2 mos