Over my career I've grown through many senior positions as a software engineer, site reliability engineer, security engineer, principal incident responder, applied computer security researcher, and principal investigator and lead on grant and contract projects. I've also worked on contract and pro-bono as an independent security consultant and subject matter expert. My publications, projects, and resources accumulated over decades can be found on my home page.

Now, I focus on researching and developing open source software tools, issuing Pull Requests fixing bugs and adding features to open source projects, and publishing articles on Medium to help others as they deal with advanced threats. My current areas of focus are:

• Better security practices for handling secrets in open source code deployment;
• Automating secure deployment of compute resources pre-loaded with multiple open source tools and subsystems for running training and purple team exercises;
• Managing those compute instances, participants, and trainer/participant interactions during events;
• Research and development of techniques for integrating open source tools, AI features, and modular content import/export to speed up development and execution of training exercises to defend against advanced TTPs.

By becoming a sponsor, you can support my efforts to make the internet a safer place as I develop new and innovative solutions in the computer security space, as well as when I contribute back to the community by helping maintain and improve the open source software on which my own tools depend.