Personal Web
🛡️ Transformative Security Leader | Strategic Visionary | AI-Powered Automation Advocate
For over 18 years I've been deciphering complexities in the Enterprise Security trenches, from fortifying defenses to designing proactive measures against threats.
My journey is driven by a passion for leading transformative security initiatives through strategic vision and intelligent automation, ensuring robust protection while empowering agile business operations.
If you're curious to dive deeper into my work, you can follow me:
VP DIRECTOR, INFORMATION SECURITY ENGINEERING
Fifth Third Bank, Cincinnati OH (Remote)
5/2022 – 12/2024
Spearheaded Enterprise Vulnerability Management program with a vision of innovation and automation that outpaces adversaries, by providing strategic leadership, cultivating key partnerships, and developing top talent to deliver excellence.
DIRECTOR, INFORMATION SECURITY
Freddie Mac, McLean VA
9/2017 – 5/2022
Established and matured comprehensive Vulnerability Management program, strengthening security posture across people, process, and technology. Drove transformation through automated innovative solutions, continuous improvement and strategic talent development.
INFORMATION SECURITY CONSULTANT
Axxum Technologies, Herndon, VA
02/2016 – 09/2017
Served as Vulnerability Management SME for Freddie Mac, providing strategic guidance that accelerated their enterprise security program maturity, enhanced risk visibility, and delivered measurable cost savings through optimized security operations.
PENETRATION TESTER, RED TEAM
Booz Allen Hamilton, McLean, VA
08/2015 -02/2016
Led comprehensive security assessments across multiple technology platforms, identifying vulnerabilities and providing actionable remediation guidance to protect organizational assets.
LEAD, VULNERABILITY MANAGEMENT
Booz Allen Hamilton, McLean, VA
09/2013 – 08/2015
Led Vulnerability Management for Booz Allen Hamilton's internal Information Assurance program, implementing innovative solutions and automation to identify, assess, and mitigate security vulnerabilities across the organization.
TECH LEAD, SYSTEMS ENGINEER
CompuCom, Herndon, VA
04/2007- 09/2013
Led enterprise IT support operations for 25,000+ users, serving as primary technical escalation point for complex issues, executive support, and special initiatives.
CONSULTANT, INFORMATION TECHNOLOGY
Self-Employed, Bulgaria
04/2007- 09/2013
Established own IT consultancy as an early career professional, serving government and educational clients including a National Forestry branch and local high school. Provided comprehensive technical services including software and hardware maintenance, network troubleshooting, system builds, and security services.
Master of Science (MS) in Computer Forensics, Concentration in Penetration Testing & Malware Reverse Engineering
George Mason University
2016 - 2018, Summa Cum Laude
Bachelor of Science (BS) in Information Security
George Mason University
2012 - 2015, Summa Cum Laude
Cybersecurity Skills & Passion, Igniting Transformative Cybersecurity Innovation
ISC2 Certified Information Systems Security Professional
GIAC Security Leadership
GIAC Cloud Security and DevOps Automation
GIAC Cloud Penetration Tester
GIAC Exploit Researcher and Advanced Penetration Tester
Offensive Security Certified Professional
Certified Ethical Hacker
CompTIA
CompTIA
CompTIA
CompTIA
CompTIA
Microsoft Certified Professional
Microsoft Certified Technical Specialist
Cisco Certified Network Associate
Get practical tips, effective practices and actionable insights for information security and technology.
When N8N workflows corrupt during updates, internal backup workflows fail too. This Ansible playbook provides external backup protection to secure your Workflows and Credentials, supporting both Docker and NPM installations with automated retention.
Faced with over 35,000 new vulnerabilities annually, how do you prioritize effectively? I developed CVE Risk Compass, an open source framework that integrates CVSS, EPSS, KEV, SSVC, and business context to help security teams focus on truly exploitable vulnerabilities that matter most.
Strategic Data Driven Risk Reduction
An in-depth look at the EPSSv4 update, and key improvements
