A note from me

Technical Cyber Security Program Manager

Sumitomo Electric · Remote

Details on this role are available on request.

Cyber Security Operations

Emusary AI · Remote

• Led the SOC 2 Type II compliance initiative for an AI startup, establishing security policies, procedures, and controls from the ground up.
• Designed and implemented information security policies — access control, incident response, and data handling — aligned with SOC 2 Trust Services Criteria.
• Partnered with engineering and leadership to identify compliance gaps and remediate control deficiencies ahead of audit.
• Built the security documentation, risk assessment, and evidence collection processes that keep the company audit-ready.
• Advise startup leadership on security best practices, balancing compliance with a lean, fast-moving engineering environment.

Sr. Cyber Security Engineer

Staples, Inc. · Remote

• Lead end-to-end response to cyber incidents, coordinating cross-functional teams to timely resolution with minimal operational impact — serving as the primary liaison between technical teams, legal, and communications during high-pressure events.
• Authored the Incident Response Plan, aligned with industry standards and regulatory requirements, and own its full lifecycle — continuously improving it with lessons learned from tabletop exercises and real incidents.
• Directed penetration testing initiatives for PCI compliance, acting as liaison between compliance teams, internal stakeholders, and external vendors to drive prompt remediation.
• Designed and facilitated technical tabletop exercises with realistic incident scenarios, validating remediation steps and strengthening team preparedness.
• Played a hands-on role in the Microsoft Sentinel deployment, including detection engineering rules and coordination of technical priorities with stakeholders.
• Orchestrated the rollout of ServiceNow GRC modules — Vendor Risk Management, Risk Register, Policy Exception — and administered the ServiceNow SOC module, streamlining compliance workflows and threat management.
• Championed process documentation, maintaining internal playbooks and knowledge bases for consistent, scalable response operations.

Project Analyst / IT Contracts Manager

SPAWARSYSCEN PACIFIC · Colorado Springs, CO & San Diego, CA

• Provided Program Analyst and Information Assurance support for J6 Command and Control at NORAD-NORTHCOM — reviewing security controls under the Risk Management Framework and ensuring STIG compliance through the Principal Network Node project's installation and implementation.
• Served as the main point of contact for information assurance matters between the PNN project and the J6 IA team.
• Oversaw two single-award contracts totaling over $107M, supported RFPs for two Multiple Award Contracts, and helped get more than 60 task orders awarded on schedule.
• Designed a relational database tracking all contract information with customizable funding reports, plus a finance form that streamlined the division's workflows.
• Delivered monthly financial analysis of labor, travel, and material expenditures to upper management, and partnered with leadership to solve procedural problems before they grew.