Bio

I previously served as the Head of Global Cyber Security for Ubisoft, where I led all efforts in information security. My group protected over 20,000 employees worldwide with a vast scope (see job desc for more) In my previous roles such as Director of Penetration Testing, I led efforts on matters of information security consulting. The gamut stretched from developing penetration testing plans for Fortune 100 companies to competing in ''bake-offs'' to win business against other top-tier consulting vendors. I have also served as a Director of Operations, leading teams of highly technical Application Security Engineers and Technical Operations staff. In this role, I was an extension of (and advisor to) over 300+ security programs across many industry verticals. Under my direction, my team triaged over 22,000 vulnerabilities in 2018-2019 alone. Personally, I love being in the trenches and performing actual assessments, but I am also adept at handling clients, architecting solutions, designing services, improving business processes, managing technical consultants, training, technical writing, marketing, and delivering solutions. While my strengths are web, network/infrastructural, and mobile security, I have personally performed a myriad of other services and implemented them for a consultancy as a deliverable (mainframe, wireless, cloud assessment, database, OSINT, APT simulation, binary reversing, and static code analysis). In my free time, I write for several information security publications and am a semi-regular capture-the-flag player. I speak regularly at security conferences globally (DEFCON, Blackhat, OWASP, and many more) While I never call myself a ''master'' of anything, I do have a very particular set of skills; skills I have acquired over a very long career. These skills make me adept at helping businesses, finding security vulnerabilities, and leading a business to a better security posture.