I've led vulnerability and exposure management for Guidewire Software's Global Security Team, owning coverage across cloud, endpoints, applications, and internet-facing assets. I drive risk-based prioritization using CISA KEV, EPSS, CVSS, exploitability, asset criticality, and business impact.
Previously at Cognisys Group and InknowTech, I led security teams managing hybrid enterprise environments, including 30,000+ assets and 5,000+ vulnerability assessments. I've built REST API and Python automation for vulnerability ingestion, SLA tracking, remediation reporting, exception handling, and integrations across Qualys, Tenable, Rapid7, Brinqa, Nucleus, ServiceNow, Jira, Jenkins, and GitHub.
I've also built a security product as Co-Founder and CTO of Bugbear Technologies, while supporting PCI-DSS, ISO 27001, SOC 2, Cyber Essentials, application security testing, zero-day response, and remediation governance.
