📢 I am excited to be speaking at RSA 2024 in a talk titled Building a Cloud Security Flywheel: Lessons from the Field. https://sec541.com/rsa will point to a blob post covering the topic of the presentation, so stay tuned.

I am a GitHub Staff Engineer focusing on security cloud infrastructure. My other titles include software developer, cloud security architect, instructor, curriculum author, speaker, and one-time manager. My passion is to make new tools that others use to improve the security of their infrastructure.

I was with the National Security Agency for over 20 years, focus on cyber operations, red/blue/hunt, and software development.

👨‍🏫 SANS Instructor

✍️ Co-author of SANS class SEC541 Cloud Security Attacker Techniques, Monitoring & Threat Detection

🔭 I’m currently researching automated response actions, Azure policy deployment, and learning Terraform even though AWS CDK is my favorite.

• Information Security
• AWS Cloud
• Azure Cloud
• Python
• Docker
• Typescript
• CDK
• Terraform (I like CDK Better)
• ColdFusion, Sybase, Smalltalk to show my age