The 25-year record

Four eras, one through-line.

Streaming media. The DNS root. The regulated-industry CISO desk. And now the AI layer that's about to sit on top of all of it. The part of the internet that has to be right — I keep ending up there.

2022 — Present Spokane, WA Current

Principal Security Architect, Ransomware Center of Excellence

Navy Federal Credit Union

Run the Ransomware CoE at the largest credit union in the US — steering committee, working groups, board-level briefings, and engineering war rooms.
Spent a year pushing a security architecture the institution didn't know it needed yet. It's deployed now.
RSAC 2025 — Cloudflare TV. RSAC 2026 — live "dead in 12 months" assessment of 20+ AI security vendors on the show floor.
Bloomberg Terminal subscriber — financial-sector threat intelligence as a daily working tool.
Ran large red-team programs. I know what they're for, how they're run, and how they fail — and I haven't pretended to go down the LLM-jailbreak rabbit hole.

2013 — 2017 SF Bay Area

Security Fellow & CISO

Gigamon

Invented Gigamon's inline Layer 2 SSL Intercept (GigaView) — the technology that made network visibility possible in encrypted environments. Patented (US 20180159898).
Ran the internal security program while helping sell the product. Both mattered.
Led pre-sales on the government side — closed deals with USG agencies including the NNSA. Drove north of $500M in closed revenue.
Published analyst at GigaOm Research — phishing protection, PKI, deception technology, IAM, GRC.
Rang the Nasdaq closing bell.

2003 — 2013 New York → SF First CISO

CISO · Head, Information Security Group

Bloomberg LP

Bloomberg's first CISO. Started as Unix Security Lead and built the program from the ground up — Attack Team, Product Security, Incident Response — creating the role before the title existed in the industry.
Built correlation engines before SIEM was a product category. Tapped the network at L2, L3, L4 — and watched the humans on it. Made the safe path the easy path for 2,500 developers against 100 sysadmins.
Operation Aurora (2010): when pressure came into the newsroom not to publish, Dan Doctoroff asked if we were secure. I told him yes — and I meant it. The story ran.
Worked with the US Government on behalf of Wall Street during some of the worst cyber years the financial sector had seen. Cybersecurity advisory to the World Economic Forum.

2019 — 2021 Oakland, CA Field MBA

Founder & Operator

Binny's Bar & Restaurant · Old Oakland

Built out and operated a full-service bar and restaurant — construction, permits, full team, real P&L. Ran it through COVID. Closed clean.

2001 — 2003 Washington, DC

Systems Architect

Verisign

DNS root infrastructure at scale. M&A, the .com/.net TLDs, and the Registry Registrar Protocol (RRP). The part of the internet that has to be right 100% of the time.

1998 — 2001

Systems Architect

AOL / Winamp / Shoutcast

Ran the systems side of Winamp and Shoutcast — streaming media infrastructure before anyone had a playbook for it.

Patents

Four filed. The visibility stack and the streaming stack.

01 Analysis of Network Traffic Rules at a Network Visibility Node US 20180159898 Issued 2019
02 Network Enumeration at a Network Visibility Node US 20180205611
03 Stream Sourcing Content Delivery System US 7912920 Issued 2011
04 Localization Link System US 20050097185A1

Broadcast

Cloudflare TV — RSAC 2025: Disinformation Campaigns, Resiliency and Attack Trends.