About
I'm a security engineer and researcher with over 15 years of experience at the intersection of threat intelligence, platform engineering, and automation. My career has traced a path from SOC analyst to staff-level engineer, always oriented toward building the tools and infrastructure that make security teams faster and more effective.
At Google, I lead the architecture and development of internal security tooling platforms for the Threat Intelligence Group. Before that, I spent years at Mandiant and EMC building threat analysis systems, incident response capabilities, and the cloud infrastructure to support them at enterprise scale.
Outside of work, I run a multi-node Kubernetes homelab, maintain a LoRa mesh network across southern New Hampshire, and build agentic AI systems for fun. I believe the best security engineers are the ones who build things.
Experience
- Lead architecture and development of enterprise-scale security tooling for the Threat Intelligence Group
- Design cloud-native infrastructure on GCP for production security operations
- Architect containerized platforms with CI/CD pipelines and comprehensive testing
- Drive engineering standards, mentor junior engineers, and establish documentation practices
- Led cross-functional teams delivering tactical security solutions to threat analysts worldwide
- Built enterprise-scale threat analysis platform supporting global security operations
- Embedded with engineering teams to bridge security requirements and technical implementation
- Deployed cloud-native applications across SaaS and PaaS platforms with production monitoring
- Architected scalable threat intelligence infrastructure for enterprise security operations
- Built enterprise-grade APIs with custom middleware — RBAC, rate limiting, and Flask-based UIs
- Led zero-downtime migration of legacy systems to containerized infrastructure
- Architected enterprise Threat Intelligence framework for global security operations
- Led incident response escalations, malware analysis, and advanced threat hunting operations
- Managed high-availability clustered platforms and large-scale HPC environments
- Presented ISR automation research at internal RSA conference
- Designed enterprise Splunk deployment for real-time security monitoring and analytics
- Built network threat detection systems and automated response capabilities
- Performed malware reverse engineering and threat intelligence indicator extraction
- Managed daily SOC operations — triage, investigation, and response coordination
Projects
What I build when I'm not at work.
NH Mesh Network
Community LoRa mesh network across southern New Hampshire. Dual-protocol infrastructure supporting Meshtastic and MeshCore with real-time monitoring, MQTT integration, and a public dashboard.
Kubernetes Homelab
Production-grade K8s cluster running 30+ services — GitOps via Flux CD, Traefik ingress, Prometheus/Loki observability stack, PostgreSQL, and automated deployments from a self-hosted Gitea instance.
Woodworking
I like building things. I spent hours when I'm behind a keyboard in my shop building things for myself and my family. Furniture, cabinets, and other custom projects. I love to tinker, so this is my outlet.
Greenhouse & Gardening
Year-round growing in New Hampshire with a backyard greenhouse setup. Vegetables, herbs, and seed starting — with IoT sensors for temperature and humidity monitoring.
OCR Wood Stove Monitor
IoT project combining thermocouple sensors with optical character recognition for automated temperature monitoring, Home Assistant integration, and mobile alerting.
3D Printed Mesh Hardware
Custom enclosures and mounting systems for LoRa mesh nodes — designed in Fusion 360 with parametric Python scripts for rapid iteration and community sharing.
Education
Western Governors University
Master of Science in Information Security and Assurance
Wentworth Institute of Technology
Bachelor of Science in Computer Networking and Information Systems