Bio

I thrive in analyzing complexities of technology evolution, breaking down the problems that occur in practice, mapping to real-world use cases, and helping improve security awareness and understanding. I've researched and advised within the application security and infrastructure security domains including API security, security testing, secure design, secure SDLC, application protection, cloud security, container security, Kubernetes security and secure continuous delivery. I've guided countless organizations globally in their security initiatives, relative to their technology stacks and their business. Prior to my research and advisory experience, I learned many hard lessons on the front lines of IT with over twenty years of practitioner and leadership experience focused on application security, vulnerability management, enterprise architecture, and systems engineering.