Security engineer in Los Angeles. I focus on the security of how we build systems — web platform security, supply-chain security, and developer security.
Currently, I work on security engineering at Anthropic. Previously, I led security engineering at Lightspark and managed supply-chain security at Snap. Before that, I was on the Chrome Security team at Google.
I hold a Ph.D. from UC Berkeley, where I worked with Dawn Song on web application security — making the web safer through better security policies and analysis tools. Our group's work lives at WebBlaze.
Earlier still, I recevied my B.S. and M.S. from Brown University, and I was a software engineer at Sun Microsystems.
Most of my time outside work is spent with my three kids and wonderful wife. I run to decompress, and I ski, snowboard, and surf whenever possible (bless SoCal weather and geography). I still rock climb occasionally, though not as much as I'd like — and I am a nearly life-long tap dancer.
My main entertainment is reading and a bit of video gaming. As a historical drop, you can view a retrospective on my wedding.
For nostalgia: my old Brown CS homepage from a previous internet.