• Reduced medical-device software build times from ~60 minutes to ~5 minutes (~12x) by re-architecting the build pipeline and distributing work across a fleet of self-hosted runners.
• Containerized the build toolchain in Docker for deterministic builds across developer workstations and CI — driving toward full byte-level reproducibility for IEC 62304 verification and FDA submission.
• Implemented SPDX SBOM generation and audit in CI covering every release artifact, aligned with FDA premarket cybersecurity guidance and traceable to upstream CVEs.
• Designed and operate CI/CD systems with deliberate focus on security and efficiency, distributing builds across self-hosted infrastructure under chain-of-custody and access-control constraints appropriate for regulated device software.
• Operate within FDA-regulated and IEC 62304-aligned medical-device software lifecycle constraints — traceability, reproducibility, and audit-readiness across every stage of the build and release pipeline.

Operated distributed scraping infrastructure for clients remotely. Locally, spent time with organizations advancing free and open-source software, particularly Futo.

• Drove ~$5M annual revenue attributable to capture-rate improvements I owned on the scraping platform.
• Joined as the second platform hire; rebuilt a fragile collection setup from a handful of EC2 boxes into an enterprise-grade distributed platform sustaining 10M+ daily collection events across Ticketmaster, AXS, and SeatGeek.
• Reverse-engineered and bypassed Akamai Bot Manager, PerimeterX, and Datadome, maintaining capture rates through repeated vendor updates that took competitors offline.
• Led the migration from monolithic EC2 to containerized AWS Fargate, cutting infra cost ~60% via auto-scaling and reducing deploy cycles to <5 minutes.
• Designed the company’s “transferless” resale primitive, eliminating the ownership-transfer step that gated competitor business models and opening a new revenue line.
• Built fault-tolerant, event-driven pipelines on SQS + Lambda + DynamoDB with circuit breakers, exponential backoff, and DLQ-based retry; owned on-call rotation for the scraping platform.
• Stood up observability stack (CloudWatch, Datadog, Logflare), establishing a 1-2 hour post-detection MTTR on a platform that previously had no formal incident-response baseline.

• Co-founded and architected a real-time threat-intelligence platform protecting cardholder exposure across a portfolio of U.S. financial institutions and major payment processors.
• Identified the Point of Compromise of the Jason’s Deli breach by clustering 170,000+ stolen cards (Joker’s Stash) against merchant-location data; methodology and visualizations published by Krebs on Security.
• Hired and led a team of 4 engineers from initial idea through enterprise rollout; personally authored the core ingestion service in Node.js flagging compromised cards within minutes of appearing on darknet markets via concurrent scrapers capturing listings as they were posted.
• Engineered LexisNexis integration for high-confidence identity resolution, converting partial cardholder data into actionable intel.
• Prevented significant fraud losses for Golden 1 Credit Union through early breach detection.
• Operational partner to the U.S. Postal Service Cybercrime Unit, building vendor-attribution systems with shipping analytics and geospatial triangulation to support federal investigations.

• Built core components of California’s mandated healthcare provider registry (Sanator Provider Registry) — now the statewide industry standard for cross-agency medical data exchange, per SB137.
• Engineered ETL pipelines and data-quality frameworks over millions of provider records under HIPAA / PII controls; implemented audit trails and governance for secure exchange.

• Joined a 3-person red-team cell at 16, executing pentests and web-app vulnerability assessments on enterprise infrastructure with a focus on JavaScript exploitation and auth-bypass classes.
• Built custom Python / .NET tooling for reconnaissance, exploitation, and lateral movement; recovered stolen client assets in multiple engagements by turning adversary infrastructure against the attackers.

• Designed and prototyped a Uniform Light Source for infinite-focus lens calibration on a satellite imaging payload (mission-critical component).
• Cross-functional engineering support across electrical and software systems within a 10-engineer team.