Bio

Expert in scaling up security programs from scratch. Technically versed in application security, cloud security, and building secure products. Passionate about building clear, scalable processes that reinforce the needs of the business and provide actionable guidance on security risks. Dedicated to developing world-class technical talent. Over the last 10 years, I have been in the unique position to assess the security posture of thousands of companies and incorporate the strengths of their security programs into my playbook for running a security program. I have used this knowledge to scale up security at Copado from nothing, securing our products, while accomplishing ISO 27001, SOC 2, and FedRAMP Moderate compliance to enable my go to market team to land large enterprise deals. The role of security should be to enable business to work at cloud speed with agility and confidence. As such, I bring significant business understanding when working with sales, finance, marketing, and IT to articulate and align core security objectives with business strategy. I also believe strongly in growing security talent. As a security leader, I have found continued success recruiting from non-security technical functions and growing talent with on-the-job security training. Combining my technical skills with my strong focus on talent development and team building, I have been able to maintain an efficient, highly productive security team withhigh tenure. My expertise includes all technical aspects of securing a modern enterprise or startup. I am proficient as an engineer and leader with modern cloud platforms like AWS & GCP, cloud technologies like Kubernetes & IaC, scaling product security through SDLC, SAST, & DAST, and security detection technologies including SEIM, EDR, and MDR. I have strong familiarity with OWASP top 10 application security vulnerabilities as well as CI/CD and DevSecOps principles. I can explain technical risks to a non-technical audience in a sensible way, and I know how to raise the security bar for an enterprise customer base. Supporting my technical experience, I also have significant business experience working with Sales and Marketing to exceed customers security maturity expectations and close large enterprise deals. I am an active participant in technical communities and industry activities, recently including BlackHat, 44Con, BSides SF, and SANS. I created an industry sharing program to help further information sharing between companies and I create security content on TikTok that has been featured in Business Insider.