Experience

• 

  University of virginia

  Apr 2013 - Jan 2014

  Research assistant

  Deployed and maintained multiple cloud environments (Openstack and Microsoft) in support of research efforts related to cyber-security for clouds and the application of cloud infrastructures in providing cyber-security protection to other physical systems.Created cloud infrastructure to support department’s effort to build a Big Data laboratory. Deployed a Microsoft Cluster-based, SQL Server cloud implementation and a Hadoop-based cluster to provide analysis of unstructured data sets. Provided support and documentation for operational cloud systems.Developed a web-based GUI for research project migrating a Ruby-based client application to a web server using Python Django. Weniger anzeigen

• 

  Captech ventures, inc

  Jul 2014 - Sept 2016

  Software Developer specializing in .Net, cloud technologies and content management systems. Worked on several Sitecore projects for major websites, including www.abc.virginia.gov and carmax.com.

  • Senior Consultant

    Aug 2016 - Sept 2016

  • Consultant

    Jul 2014 - Aug 2016
• 

  Msi (mission secure, inc.)

  Sept 2016 - Feb 2020

  Product architect and lead security engineer

  Founding engineer that designed, architected, and built MSi’s foundational ICS security products. Lead developer for MSi's Console product. Managed MSi’s development infrastructure, IT infrastructure, SIEM, and product security. During tenure grew the development team to 15 engineers and built MSi’s product development process from the ground up. Designed and built a secure custom update process for MSi’s products on air gapped networks using signed packages and manifests. Built out development team’s on-premise infrastructure via physical and virtual servers, developer workstations, and adversarial network simulators. Built out 2FA setup for all on premise development infrastructure access. Setup cloud based SIEM for all on premise and cloud infrastructure via Azure Sentinel. Built and maintained corporate networks, firewalls, VPNs, wifi, VLANs, laptops, O365 accounts, secret management, PKI, Azure AD configuration, and customer support systems. Transitioned development team from on premise infrastructure to SaaS and cloud infrastructure, reducing maintenance overhead and saving our small team over 20 hours of maintenance a week. Created corporate security policies and controls including email security such as DKIM, DMARC, and SPF, 2FA for O365 via DUO and YubiKeys, password and secret management via LastPass, workstation secure baseline configurations, phishing education campaigns, security incident response process, and acceptable use policies. Developed an employee security education program. Weniger anzeigen

• 

  Palantir technologies

  Feb 2020 - Apr 2025

  Application security engineer

  Application security engineer focused on software supply chain security. Architected and scaled Palantir’s software supply chain security program. Successful projects include rolling out hardware backed commit signing, CI/CD hardening, artifact and supply chain cryptographic attestation, source control security, dependency vulnerability management, threat modeling, multiple red team engagements, and static and dynamic code analysis.Hands on engineer with a track record of driving projects that affect thousands of engineers across hundreds of teams spread across the globe. Experienced working with engineering, IT, business development, and compliance leadership to reduce risk and enable desired business goals. Big picture thinker who can enable organizational security change and drive improvements in security culture. Significant experience in leading technical architecture reviews, secure SDLC design, threat modeling, data wrangling, and project management. Weniger anzeigen

• 

  Auger

  Apr 2025 - now

  Principal security engineer