May 2023 – Feb 2025 · 1 yr 9 mos · Remote

Oct 2022 – May 2023 · 7 mos

May 2021 – Oct 2022 · 1 yr 5 mos

• Served as Application Security team(s) lead and built out the future of AppSec program at Podium
• Created, ran, and managed Podium Capture the Flag Security event; an internal Security conference for all of Podium Engineering, Design, and Product teams

Jul 2019 – May 2021 · 1 yr 10 mos

• First Application Security Engineer hire at Podium
• Fostered working relationship with all development teams to ensure a Secure SDLC; performing Architecture Reviews, spearheading Security Education efforts, Secure Code Reviews in Elixir & JavaScript
• Developed custom security measures for application build pipeline
• Created Podium’s Bug Bounty Program and Vulnerability Disclosure Policy
• Mentored Security Engineer Intern in 2020; collaborated on developing novel GraphQL IDOR testing tool in Elixir

Feb 2018 – Jul 2019 · 1 yr 5 mos · Las Vegas, Nevada Area

• Served as sole technical POC for software development related business endeavors
• Worked with every team within organization to assist optimize performance through technology and handle departmental needs
• Built and managed the development of Augmented Reality mobile application
• Built custom website for fans to get innovative, exclusive look into the behind-the-scenes of the team and organization
• Served as lead on eSports related initiatives
• Built out and maintained the organization's website

Jun 2016 – Sep 2016 · 3 mos · Seattle, Washington

• Participated in penetration testing engagements for Fortune 500 clients
• Worked on collaborative reverse engineering project with a team in San Francisco
• Received Secure Coding Training from Robert C. Seacord for C/C++ & Java

Nov 2015 – Jun 2018 · 2 yrs 7 mos · Eugene, Oregon

• Assisted with incident response and advising customers
• Developed internal protocol for evaluating web applications for vulnerabilities to mitigate potential security breach
• Started development on Drupal site to host warning system of phishing/spear-phishing attempts to entire University of Oregon campus staff and students
• Analyzed network traffic for malicious activity by cross-referencing IDS alerts with traffic flow data, packet analysis, DHCP leases, and other data points.
• Performed penetration testing of security systems by using Nmap and other scanning tools
• Performed forensic analysis of compromised Linux boxes
• Assisted in the maintaining of custom software

Apr 2015 – Sep 2016 · 1 yr 5 mos · Eugene, Oregon

• Group studied subjects such as: Reverse Engineering, Exploitation, Cryptography, Forensics, Web App Penetration
• Participated in numerous Capture the Flag events
• Organize weekly meetings
• Developed website for club
• Gave presentations and lectures to other members of University of Oregon Security Club
• Lectures personally given included: SQL Injection, OS Injection, CSRF, and Live Web App Penetration Demo.

Aug 2014 – Jan 2016 · 1 yr 5 mos · Eugene, Oregon

• Created websites for the University of Oregon's EMU Marketing Department, and other third-party organizations, using various development platforms
• Coordinated with graphic designers to provide high quality products to customers
• Technologies Used: Drupal, WordPress, Custom PHP Applications, SASS, HTML/CSS, and JavaScript.

Jun 2014 – Aug 2014 · 2 mos · Salem, Oregon

• Catered to over 150 employees requiring technical assistance with computer needs, such as:
• Software and Hardware Installation
• Computer Assembly
• Network Monitoring and Set-Up.
• Used Active Directory and SCCM for core services
• This was a limited duration position that was only available to one high school student for the summer.

Mar 2014 – Mar 2014 · 0 mo · Salem, Oregon

• Taught middle school students the basic concepts of mechanical engineering
• Used students skills to construct robots to perform various tasks and challenges
• Instructed basics of programming to make robots custom functions
• This was a session class taught over spring break.