Aug 2024 – Present · 1 yr 9 mos

• L8s are technical leaders who work on challenges that directly affect our ability to compete and win as a business. They do this by identifying and tackling issues that result in impact for Engineering and Netflix as a whole.
• In this role, I'm leading the development and integration of our Security, Privacy, and Assurance strategies. Closely aligned with business objectives, this role ensures that our security posture not only protects the company but also facilitates growth and innovation for Netflix. Current focus areas include security technical lead for Netflix Live product, tech lead of Attack Emulation Red Team, and tech lead DDoS research and testing.

Jun 2021 – Oct 2024 · 3 yrs 4 mos

• I work as a Security principal engineer on technical vision, strategy, execution, influence, and alignment of select security and Engineering-wide cross-functional projects without direct reports.
• This can take many forms, including developing and influencing team/charter/technical strategies, team/product/org visions, architectural design, security/risk/capability assessments, execution plans, gap analysis, prototyping, and technical decision-making.
• I work on team enablement through mentorship, career development work, onboarding support, and identifying and resolving conflicts.
• Currently I am leading our security program for Netflix Live and I lead our attack emulation team.

Feb 2020 – Jun 2021 · 1 yr 4 mos

• I help align the technical strategy across the Product And Application Security org, which encompasses 4 teams: Cloud Infrastructure Security, Platform Security, Application Security, Customer Trust, and Safety.
• I will lead various cross-team efforts and identify new high-leverage opportunities for the organization. My current focus area is building out a scalable risk program for our product and application security org.

Oct 2013 – Feb 2020 · 6 yrs 4 mos

• Keeper of all things security. I'm focusing on making sure the Cloud Platform stays secure, robust and resilient.

Jul 2012 – Sep 2013 · 1 yr 2 mos

• Provide strategic information security advisory and consulting services for enterprise clients. Translate business, industry, and regulatory requirements into information risk management objectives and associated tactical/strategic information security initiatives.
• Specialties include web application assessments, social engineering, mobile application security assessments, penetration testing, security policy review and design, malware analysis, tool development, and security research.
• Neohapsis lab manager responsible for developing research agenda, managing labs initiatives, publishing and presenting research.
• Responsible for mentoring associate consultants and provide training courses in application security.

Apr 2011 – Jul 2012 · 1 yr 3 mos

• Provide strategic information security advisory and consulting services for enterprise clients. Translate business, industry, and regulatory requirements into information risk management objectives and associated tactical/strategic information security initiatives. \

Jul 2010 – Apr 2011 · 9 mos

• Provide strategic information security advisory and consulting services for enterprise clients. Translate business, industry, and regulatory requirements into information risk management objectives and associated tactical/strategic information security initiatives.

Mar 2012 – Sep 2013 · 1 yr 6 mos · Greater Chicago Area

• Adjunct Professor at DePaul University teaching the Masters level course Software Security Assessment (SE-526).

May 2006 – Jul 2010 · 4 yrs 2 mos

• Information Technology Consulting Services to businesses in the Chicago Metropolitan and surrounding areas. Primary focus is on network and systems solutions for small to mid-sized businesses in high availability financial and trading environments.

Oct 2005 – Jun 2006 · 8 mos

• The Electronic Visualization Laboratory (EVL) is an interdisciplinary graduate research laboratory that combines art and computer science, specializing in advanced visualization and networking technologies. My focus was developing NetLasso, an intuitive software tool for multi-site network performance testing writen in Python.

Feb 2004 – Oct 2005 · 1 yr 8 mos

• The basic mission of the MCS Division is increase scientific productivity in the 21st century by providing intellectual and technical leadership in the computing sciences -- computer science, applied computational mathematics, and computational science. My particular focus was developing monitoring software to the TeraGrid cluster for real-time monitoring and analysis of network and systems data, as well as Linux cluster administration.