About

Work Experience

• Deputy CISO, ExtraHop Networks

  Oct, 2016 - Present

  Responsible for securing our products, securing our business relationships, securing our cloud deployments, securing all internal data including customer data, and finding security-related use-cases for our best-of-breed network detection and response (NDR) tool.

  Built a Threat Research team responsible for researching attacks, building detection algorithms, and deploying threat intelligence. Grew the team to 10 team members.

  Built a compliance strategy. Personally responsible for execution; working extensively with engineering and legal resources to achieve SOC2, HIPAA and FIPS certifications. Currently in progress with FedRAMP.

  Currently building a Security Operations Team. Goal is to operationalize ExtraHop tooling with other tooling to meet all compliance and regulatory obligations.

  • Founded and built Threat Research Team.

  • Responsible for compliance roadmap and execution.

  • Responsible for Security Operations.

• Product Security Architect, Tempered Networks

  Mar, 2015 - Sep, 20161 year 6 months

  Responsible for all aspects of security at a security product startup, including a secure development lifecycle strategy, certification strategy, and product licensing strategy. Responsible for hardware platform selections and the team that does hardware bringup and performance. Often responsible for competitive analysis and managing the software release process.

  Architected and implemented features for optimization and scaling, debugging and fuzz testing an implementation of the IPSec HIP protocol (RFC5201). Improved performance by 40% in a single release.

  Architected and implemented a dynamic identity provisioning server to allow the company to scale from individual shipments to thousands of devices.

  • Designed and implemented a provisioning service for all company devices.

  • Led security of the development team.

• Manager, Product Development - Platform Security Team, F5 Networks

  Jul, 2012 - Feb, 20152 years 7 months

  Responsible for many security initiatives, including threat modeling and code review. Ran externally contracted penetration tests. Responsible for security maintenance on the appliance for many years.

  Member of a team integrating newly acquired products. Required a broad knowledge of entire software stack. Responsible for design as well as coordinating development efforts between remote offices.

  Implemented a PAM based authentication engine with a password policy; LDAP, RADIUS, TACACS+ and SSL client certificates.

  Led a team that built an appliance based on RH9 and RHEL3 filesystem, including a build system.

  Designed and implemented a capable and highly configurable object oriented authorization model for a web configuration application. First implemented in C++, then ported to Java and a SQL database.

  • Led a team dedicated to security of the F5 platform.

• Manager, Product Development - Virtual Appliance Team, F5 Networks

  Nov, 2011 - Jul, 20128 months

  Built a virtual edition of flagship BIG-IP appliance. Led the team responsible for the entire product. Increased performance from 1Gb/second to 3Gb/second on similar hardware across multiple hypervisors.

  Authored a comprehensive three year roadmap for a new virtualized product. Initiatives include bare metal bringup, easy configuration of the appliance, a new driver architecture for scalable throughput, licensing changes, and integration with multiple hypervisors.

  • Led a team dedicated to buliding a virtual appliance.

• Principal Software Engineer, F5 Networks

  Jun, 1999 - Nov, 201112 years 5 months

  Responsible for many security initiatives, including threat modeling and code review. Ran externally contracted penetration tests. Responsible for security maintenance on the appliance for many years.

  Member of a team integrating newly acquired products. Required a broad knowledge of entire software stack. Responsible for design as well as coordinating development efforts between remote offices.

  Implemented a PAM based authentication engine with a password policy; LDAP, RADIUS, TACACS+ and SSL client certificates.

  Led a team that built an appliance based on RH9 and RHEL3 filesystem, including a build system.

  Designed and implemented a capable and highly configurable object oriented authorization model for a web configuration application. First implemented in C++, then ported to Java and a SQL database.

  • Architected and developed software for world-class network load balancer.

• Senior Software Engineer, CyberSafe

  May, 1997 - Jun, 19992 years 1 month

  Worked with kerberos authentication technology, including designing and implementing innovative client side and server side components of an http authentication module based on kerberos. Maintained and enhanced kerberos code for multiple platforms.

  • Enhanced Kerberos codebase.

• Senior Staff Member, Applied Computing Systems

  Jan, 1995 - May, 19972 years 4 months

  Responsible for securing and maintaining a network of PCs and Sun workstations. Wrote applications for Emergency Management Operations Centers deployed by the US military.

  • Secured PCs and Sun workstations.

Projects Experience

• Public Speaking

  Jan, 2016 - Present

  I often present at security conferences, including BSides Seattle, BSides Portland, ToorCamp2018, DakotaCon, and BlackHat 2019, RSA, and many other events such as Evanta and SecureCISO.

Skills

Education

Certificates

Awards

Volunteer Work

Publications

Interests