I’m a Senior Product Security Engineer working at the intersection of architecture and security.

I design systems that hold under real-world conditions – not just pass security checks.

My focus is not on tools, but on how systems are structured: where trust boundaries are defined, identities are enforced, and attack paths are either created or eliminated.

Over the past 9+ years, I’ve secured cloud-native and distributed systems by eliminating implicit trust and embedding security directly into system design and CI/CD pipelines.

I’ve worked across product security, red teaming, and application security – validating exploitability, not just theoretical risk.

How I Think About Security

Security is not a checklist.

It’s structure.
It’s clarity.
It’s how systems behave under pressure.

If the architecture is wrong, controls only delay failure, they don’t prevent it.

What I Focus On

• Security architecture and trust boundary design
• Threat modeling as an architectural discipline
• Identity-first and Zero Trust systems
• AI / LLM security (RAG pipelines, agents, tool execution risks)
• Secure-by-design cloud-native systems

Current Focus

I’m currently working on security architecture for AI inference systems, focusing on how modern AI systems fail across input, retrieval, reasoning, and execution layers.

Secure the behavior, not just the model.

What I Care About

I’m interested in systems that are designed to hold not just pass scans.

Systems that behave correctly under adversarial conditions.

Systems that don’t break when reality hits.