• NAM Vulnerability Response, Senior Vice President, Citi (Vulnerability Operations), New York, NY (September 2022 – September 2023; November 2023-Present)

• Founded and scaled Citi's Vulnerability Response function from a single-practitioner capability to a seven-person team, formalizing risk assessment, escalation, and accelerated remediation workflows; temporarily assumed coverage for peer functions, leading multiple teams through overlapping audits and projects.

• Own the enterprise acceleration framework governing risk-based remediation decisions across 5 million assets, thousands of internally developed applications, and thousands of engineering teams worldwide; align due dates to domain, exposure, exploitability, impact, and compensating controls.

• Established Vulnerability Response within Citi's Cybersecurity Fusion Center as a peer to Vulnerability Reporting and Governance; maintain operational integration with the Fusion Center and Offensive Security and Vulnerability Management to track high-profile remediation across regions and teams.

• Directed review of nearly 10,000 in-scope vulnerabilities in 2025 and nearly 14,000 year-to-date in 2026 after applicability filtering, covering CVSS 9+, exploited/PoC, threat intelligence, and Red Team findings; reduced most critical-review decisions to one business day while adapting criteria to AI-driven CVE growth.

• Directed a weekend emergency campaign to remediate approximately 50,000 Windows servers within 48 hours for an exploited-in-the-wild vulnerability, achieving substantial completion despite complex estate dependencies.

• Lead cross-functional response to high-profile and confidentially disclosed vulnerabilities, coordinating SOC, engineering, and operations teams on containment, phased configuration controls, patching, executive summaries, and defensible remediation timelines.

• Helped author Citi's NIST CSF-aligned Vulnerability and Threat Management Standard; represented the program through internal audits and OCC/FRB examinations and presented risk decisions, metric discrepancies, and corrective actions to senior cyber leadership, examiners, and governance forums.

• Cover Vulnerability Reporting responsibilities, including metric definitions and preparation of board-level and monthly regulator reporting on BAU and accelerated overdue exposure; remediation decisions directly affect enterprise risk metrics.

• Define the target operating model, requirements, workflow/control redesign, testing, and stakeholder adoption for migration to ServiceNow Vulnerability Response; coordinate connected processes and shape the use of Qualys, Tanium, inventory, exposure, and homegrown SQL reporting data in actionable remediation tasks.

• Lead exploration of AI-assisted vulnerability triage, combining inventory/exposure and CVE data while defining future integrations intended to identify critical exposure before scanner results are available.

• Red Team, Vice President, Citi (Vulnerability Assessments), New York, NY (Jan 2020 – September 2022)

• Executed authorized adversary emulations, penetration tests, and country-wide assessments, translating technical findings into enterprise remediation for global infrastructure.

• Architected AWS-based off-network adversary infrastructure using serverless services and CDN-fronted domain rotation; designed a phishing exercise that demonstrated compromise of multiple accounts and drove new EDR detections, phishing-domain validation, credential-storage controls, and network-segmentation remediation.

• Built Python targeting automation for a 250,000-person global phishing program, segmenting campaigns by language, template, and time zone while filtering restricted-address populations; supported vendor selection and international regulatory requirements.

• Led technical assessment of emerging vulnerabilities and coordinated remediation across global engineering teams; helped select and implement security tooling supporting adversary simulation and vulnerability analysis.

• IT Security Operations Analyst, JetBlue Airways (IT Security Operations), New York, NY (May 2018 – Dec 2019)

• Served as informal technical lead for nearly one year during a CISO/general-manager transition within a five-person security organization; supported a high-profile breach through technical coordination with external counsel, evidence collection, support for FBI notification, and quarantine of compromised accounts and systems.

• Identified a hardcoded WAF bypass exploited by bots, reducing unnecessary container workload approximately 50% and avoiding an estimated $500,000-$1 million per month in cloud-compute and downstream Sabre costs.

• Helped migrate the e-commerce WAF from Akamai to Fastly with minimal business disruption; selected and deployed SentinelOne enterprise-wide to replace McAfee ePO, improving behavioral detection, endpoint telemetry, and contracted-SOC response.

• Selected and implemented CASB/DLP across approximately 2,000 managed endpoints, designing PCI and PII controls to protect airline and payment data without disrupting business operations.

• Partnered with PCI DSS auditors to achieve Reports on Compliance in two consecutive years.

• Incident Response Consultant, LIFARS (Forensics, Security, & Incident Response), New York, NY (Sep 2017 – May 2018)

• Rebuilt and managed forensic evidence intake, chain-of-custody, lab workflows, and asset controls; extracted and analyzed evidence supporting defense in SEC matters and litigation discovery.

• Performed forensic analysis of on-premises and Office 365 incidents and produced defensible technical and legal deliverables for counsel and clients.

• IT Security Consultant, Kraft Kennedy (Information Security & Governance), New York, NY (Jan 2016 – August 2017)

• Performed penetration tests, security assessments, and active-breach response for law firms; identified an externally exposed RDP service sustaining thousands of failed logins per minute, detected successful compromise, helped quarantine the host, and guided forensic analysis and replacement of remote access.

• Created NIST CSF- and NYDFS-aligned policies and governance documents for regulated clients.

• Productized security assessments through automation and fixed-fee delivery, meeting individual revenue targets with under 5% billable-hour utilization versus approximately 80% previously.

• Intern, Fordham University (University Information Security Office), New York, NY (Sep 2015 – Dec 2015)

• Worked in a SOC type role reviewing IDS logs and tracking down events. Automated several workflows to handle alerts and copyright notifications.

• M.S. Technology Management, Columbia University, New York, NY (May 2023)

• M.S. Cybersecurity, Fordham University, New York, NY (Jun 2016)

• B.S. Computer Science, Rensselaer Polytechnic Institute, Troy, NY  (May 2015)

• GPEN, GIAC Certified Penetration Tester (September 2016 – Present) Verify

• GCIA, GIAC Certified Intrusion Analyst (June 2017 – Present) Verify

• SEC560: Network Penetration Testing and Ethical Hacking, SANS (5 day training, September 2016, NY, NY)

• SEC503: Intrusion Detection In-Depth, SANS (5 day training, June 2017, NY, NY)

• TrustedSec: Bypassing Security Defenses, TrustedSec (2 day training, August 2013, Las Vegas, NV)

• Microsoft Partner Training: Securing Office 365, MSFT (1 day training, New York, NY)

• Akamai Web Performance Foundations, Akamai Technologies (2 day training, New York, NY)

• EY Threat and Vulnerability Management Working Group, Citi representative

Active contributor in a recurring cross-bank forum of managing directors from major financial institutions; bring agenda items on program maturity, critical-vulnerability response, and AI-driven changes in the threat landscape.

• CVSS Special Interest Group (FIRST), Member/Co-author

Voting member on the Common Vulnerability Scoring System Special Interest Group (CVSS SIG) working to develop and publish CVSSv4.

• Phi Kappa Phi Honors Society (ΦΚΦ), Member

Oldest all-discipline honors society in the United States, founded in 1897. Membership is by invitation only, by an established campus chapter, and is restricted to students with integrity and high ethical standards and who are ranked scholastically in the top of their class, regardless of the field of study.

• GIAC Advisory Board, Member Verify

Made up of GIAC certified professionals who wish to give back to the security community by taking an active role in the GIAC program. Participation is by invitation only and is offered to certification holders who earn a score of 90% or better on at least one exam.

• SANS Ninja Coin, Coin Holder

Awarded to those who win the capture the flag challenge at the end of the SEC560 course. The Coin is meant to be an honor to receive it; it is also intended to be rare.

• Boy Scouts of America Eagle Scout and Order of the Arrow (BSA), Member

Achieved the rank of Eagle Scout in 2006 at 14.