Security leadership · Applied AI · Open source
I lead security organizations, build practical tools, and write about the systems behind secure cloud, software, and AI products.
A local-first control plane for running, measuring, and governing open models on Apple Silicon.
Read the build storySelected work
A mix of open-source engineering, applied research, and tools designed to make security decisions clearer.
01 / Featured case study
I built an MLX-based operating environment for local models: model lifecycle management, an OpenAI-compatible endpoint, reproducible benchmarks, memory admission controls, privacy-bounded telemetry, and a browser control center.
AWS official sample
Continuous analysis and remediation patterns for right-sizing AWS IAM permissions.
Open-source security tooling
Code analysis that brings multiple security scanners and AI-assisted remediation into one workflow.
Interactive decision tool
Risk scoring that combines CVSS, exploitability, business impact, guardrails, and compensating controls.
Field notes
Long-form notes on AI systems, security strategy, cloud operations, and what changes when ideas meet production.
Loading recent writing…
How I work
The best security programs are technically credible, operationally measurable, and easy for product teams to adopt.
Start with the decision or workflow people struggle with, then make the secure path concrete and repeatable.
Use telemetry, risk signals, and feedback loops to distinguish visible activity from meaningful progress.
Pair technical controls with developer enablement, clear ownership, and teams trusted to improve the model.
Selected background
My career moved from hands-on security engineering to product security, cloud strategy, and global leadership. That range shapes how I build: architecture, incentives, operations, and customer trust are one connected system.
Based in the San Francisco Bay Area.
Working globally across product, engineering, and go-to-market teams.
Dayforce · Global product security across 300+ SaaS services.
Synopsys · Cloud and application security strategy for engineering products.
Automation Anywhere · Cloud security, compliance, and container delivery.
Amazon Web Services · Secure cloud adoption for ISVs and enterprises.
Clorox, PwC, Safeway, and Target · Enterprise security, risk, compliance, and operations.