Greater Seattle Area
As an Application Security practitioner with over 18 years of industry experience, I specialize in evaluating applications across various stages of the Software Development Life Cycle (SDLC). My expertise spans conducting comprehensive Threat Model reviews, Architecture/Design reviews, and both Manual and Automated code reviews (SAST). Additionally, I am proficient in Dynamic Application Security Testing (DAST) and Web Penetration Testing. My unique background encompasses roles as both a builder and a breaker within diverse organizational contexts. I have contributed significantly to organizations by initiating and developing Application Security functions from inception. What fuels my passion for security is the profound impact it has on the businesses and individuals alike. Whether it's devising robust strategies to mitigate risks, leading incident response teams through crises, or staying ahead of emerging threats, I thrive on the challenge of safeguarding what matters most. Throughout my career, I've had the privilege of collaborating with a spectrum of organizations, ranging from small startups to major banks and product companies, and from service consultancies to homegrown security firms. Each unique experience has not only sharpened my technical acumen but also reinforced my unwavering commitment to excellence and continuous improvement.
Part of the Security Architecture and Consulting Team.. working with some key pillars in managing their security proactively.
https://www.microsoft.com/en-us/securityengineering/sdl