Portfolio / Selected work

Building security
into the work.

My work spans application and cloud security, security infrastructure, incident response, and the systems that help teams make better decisions.

01 / Experience

Where I’ve worked

From consulting and security research to product security at scale.

Harness

Nov 2025 — Present

Product security, vulnerability management, supply chain protection, and security automation.

Product securityVulnerability managementCI security

Architected SoS, a vulnerability management and security posture platform used across Harness and acquired companies.

Built security scanning and governance workflows across CI pipelines.
Developed AI assisted triage and automation for vulnerability and pentest reports.

// Stacks & Experience

Six areas where hands-on engineering, security research, and program ownership meet.

01
Product security
Build security into product decisions, delivery paths, and ownership models.
Built security scanning and governance workflows across CI pipelines.
02
Vulnerability management
Turn findings into prioritized, traceable remediation programs.
Architected SoS for vulnerability management and security posture.
03
Application security
Find design and implementation risk across web applications and APIs.
Built SAST and DAST coverage into delivery pipelines.
04
Cloud & Kubernetes security
Shape practical controls around cloud posture, identity, and workloads.
Built cloud security tooling and runtime protections for analyzers.
05
Software supply chain security
Protect the path from source and dependency to signed release artifact.
Established release provenance and container signing controls.
06
Security automation & AI triage
Design systems that reduce repetitive analysis while preserving judgment.
Developed AI-assisted triage for vulnerability and pentest reports.