About

Work Experience

• Information Security Manager, T-Rex Solutions, LLC

  Jan, 2024 - Present

  Lead T-Rex's information security program

  • Lead T-Rex's information security program, including strategy and security architecture

  • Led successful ISO 27001, NIST SP 800-171, and CMMC audits

  • Rolled out EDR, SIEM, and zero trust architecture across the T-Rex enterprise

  • Overhauled the vulnerability management program and established program metrics

  • Conduct incident response and run tabletop exercises with executives

  • Built an internal AI-powered SCORM course builder for company-wide security awareness training

  • Lead AI adoption for IT & Security, developing AI tools and reporting progress to company leadership

• Network Security Manager, U.S. Department of Education

  Apr, 2025 - Present

  Manage the network and security team on the Department's cloud hosting contract

  • Manage a 5-person network and security team on the Department's cloud hosting contract

  • Led TIC 3.0 implementation and a full redesign of the AWS and Azure cloud networks

  • Secure traffic with Palo Alto VM-Series firewalls and public endpoints with AWS WAF, CloudFront, and Azure Front Door

• Cloud Engineer, U.S. Department of Education

  Sep, 2024 - Apr, 20257 months

  Hands-on engineer migrating systems from a legacy hosting platform to AWS

  • Hands-on engineer on the team that migrated 20+ systems from a legacy hosting platform to AWS in 3 months

• Cybersecurity Engineer, T-Rex Solutions, LLC

  May, 2020 - Dec, 20233 years 7 months

  Security engineering role covering penetration testing, infrastructure, and security program development

  • Conducted periodic penetration tests, managed network infrastructure, and developed incident response exercises

  • Led MITRE ATT&CK adoption and ISO 27001 preparation, and managed the information security intern

• Cybersecurity Analyst, T-Rex Solutions, LLC

  Aug, 2019 - May, 20209 months

  Core analyst role with responsibilities across multiple security domains.

  • Led malicious email analysis and vulnerability & patch management

  • Performed cloud security architecture, security awareness training, and network monitoring

• Cybersecurity Intern, T-Rex Solutions, LLC

  Jun, 2019 - Aug, 20192 months

  Initial internship role supporting the security team in foundational security implementations.

  • Re-architected the SIEM platform for security event logging and detection

  • Supported Splunk implementation and the development of security procedures, policies, compliance, and training

• Data Engineer, Palantir Technologies

  Jun, 2022 - Dec, 20231 year 6 months

  Built Palantir Foundry data pipelines for the Department of Energy's National Nuclear Security Administration (NNSA)

  • Built Palantir Foundry data pipelines for the Department of Energy's National Nuclear Security Administration (NNSA)

  • Developed ETL in Python, PySpark, and TypeScript to ingest, clean, and normalize critical government data

• Security Researcher, Synack Red Team

  May, 2022 - Aug, 20242 years 3 months

  Exclusive bug bounty and penetration testing program member.

  • Tested web, host, and mobile targets and reported security vulnerabilities for Synack's clients

  • Selected for Synack's vetted researcher program through technical assessments and interviews

• Applications Tester & Developer, Mobius Intelligent Systems

  May, 2019 - Sep, 20194 months

  Tested and developed business intelligence applications for customers.

  • Tested and assisted in developing JavaScript, PHP, MySQL, and Python business intelligence applications for customers

• SOC Analyst/Engineer, Capitol Technology University Cyber Lab

  Mar, 2019 - Sep, 20196 months

  Managed and developed the university's Security Operations Center.

  • Managed and developed the Cyber Lab's Security Operations Center (SOC) to keep the lab network secure

  • Fostered a hands-on learning environment for other students

  • Created Splunk rules and dashboards for analysis

• Data Technician, ADNET Systems, Inc.

  Dec, 2018 - May, 20195 months

  Supported NASA heliophysics satellite missions through system management.

  • Managed CentOS and macOS systems and their logs to support heliophysics satellite missions (SDO, SOHO, STEREO)

• IT Intern, CSRA, Inc.

  Dec, 2017 - Jan, 20181 month

  IT support for government contract effort.

  • Managed documents and IT resources to assist the government contract effort

  • Imaged and prepped Windows 10 systems and Android phones for deployment

Projects Experience

• GlyphGuard

  Oct, 2026 - Present

  Detects invisible and lookalike Unicode characters

  • Detects ASCII smuggling, emoji payloads, Trojan Source bidi overrides, zero-width characters and homoglyphs

  • Decodes hidden prompt-injection payloads and sanitizes LLM input with auditable profiles

  • Zero-dependency Python library and CLI with bundled Unicode 18.0 tables, published to PyPI

  • Ships as a GitHub Action and pre-commit hook for CI and supply-chain scanning

• HAMRadioWallet.com

  Jul, 2024 - Sep, 20242 months

  App that adds FCC amateur radio licenses to Apple Wallet and Google Wallet

  • Built with Next.js and TypeScript

  • Integrated with Apple Wallet and Google Wallet APIs

  • Deployed with SST

• GitHub Discord Bot

  Jan, 2024 - Jun, 20245 months

  Serverless bot that subscribes Discord channels to GitHub repository events

  • Built with AWS Lambda and AWS SQS

  • Integrated GitHub Webhooks and Discord APIs

  • Serverless architecture for scalability

• UNICORD

  May, 2022 - Present

  Security research organization developing proof-of-concept exploits for known CVEs.

  • CVE-2025-29927: Next.js Middleware Authorization Bypass

  • CVE-2022-25765: pdfkit Command Injection

  • CVE-2021-22204: ExifTool Arbitrary Code Execution

  • CVE-2020-5844: Pandora FMS Remote Code Execution

  • CVE-2021-3560: Polkit Local Privilege Escalation

• Portable User Interface For Cyber Security Awareness

  Dec, 2015 - Jun, 20166 months

  My Portable User Interface For Cyber Security Awareness was the example of mastery to graduate my senior year at Sussex Technical High School. It has a physical aspect which is a portable kiosk engineered specifically to view the website with a touchscreen interface.

  • Built with Linux and Raspberry Pi

  • Custom touchscreen kiosk interface

  • Information Security Awareness training platform

  • Senior capstone project

Skills

Education

Certificates

Awards

Publications

Interests