12 years leading enterprise application, cloud, and AI security programs.
Application, Cloud and AI Security at The Aspen Group.
MBA · OSCE · OSCP · OSWP
About
I operate across application security, cloud infrastructure, and AI systems, thinking like an attacker to lead programs that hold under real-world pressure.
At The Aspen Group I own both the AppSec and cloud security programs across 5 business units. My work spans the full stack: secure architecture, cloud posture, identity risk, developer security enablement, and red team validation.
My current research focuses on cryptographic provenance chains for LLM and agent pipelines, building trust anchors in a world where the boundary between code and data is dissolving.
Secure SDLC · OWASP · Threat Modeling · Code Review
CSPM · CIEM · Cloud-Native Architecture · Multi-Cloud Posture
Red Team · Penetration Testing · OSCE · OSCP · OSWP
Agent Pipelines · Prompt Injection · Cryptographic Provenance
Currently Researching
Cryptographic provenance chains for LLM & agent pipelines
Oct 2023 – Present
Application & Cloud Security
The Aspen Group
Owning application, cloud, and AI security programs across 5 business units: secure SDLC, architecture reviews, cloud posture management, threat modeling, and red team operations.
5 Years
Senior Security Engineer & Lead Instructor
Evolve Security
Led offensive security engagements and trained 400+ security professionals in hands-on penetration testing methodologies.
Ongoing
Guest Lecturer
IIT · Lewis University · DePaul
Delivering applied security curriculum covering OWASP, cloud-native security, adversarial ML, and applied cryptography.
Founder
Conference Organizer
NISS & HackersDay
Founded and organized two security conferences bringing together practitioners, researchers, and enterprise security leaders.
Active
Expert Witness
Federal & Civil Courts
Retained as expert witness in federal and civil proceedings on matters involving digital forensics and cybersecurity.
2024
MBA
Westcliff University
Bridging technical depth with business strategy to lead security programs at the executive level.
Certifications
Industry-recognized credentials across offensive security and enterprise risk
Speaking
From DEF CON main stage to university lecture halls, I translate deep technical complexity into insights that move security programs forward.
Offensive Security Operations at Scale
2023
Breaking Application Trust Chains
2022
Red Team Tradecraft for the Modern Enterprise
2023
Securing AI-Powered Applications & Agent Pipelines
2025
Applied Penetration Testing
Guest Lecture
Adversarial ML & LLM Security
Guest Lecture
Enterprise AppSec & Cloud Security Programs
Guest Lecture
Writing
Get in touch
Whether you need a keynote speaker, an AppSec advisor, or an expert witness. I'd like to hear from you.