01 — Profile
Engineering-grounded, operations-tested.
My work sits at the intersection of security engineering and operational leadership. I've spent years administering the enterprise stack that most attacks route through — Active Directory, Microsoft Entra ID, Microsoft 365, Windows endpoints, VPN and authentication, identity lifecycle, and least-privilege access — and building detection and response capability on top of it with Wazuh, Sysmon, PowerShell, and the MITRE ATT&CK framework.
Alongside the engineering, I lead. I currently direct cybersecurity operations and incident response across technical, operational, and customer-facing teams, coordinating vendors and partners and owning a multi-million-dollar technology budget. That combination — I can build the detection, run the incident, and brief the executive on the risk — is what I bring to a security or platform team.
I also serve on the incident response team of the Ohio Cyber Security Reserve, supporting public-sector organizations through cyber incidents, and I hold a B.S. in Information Technology earned while working full time.
