E C

Security architect and endpoint security leader with experience building secure enterprise platforms in regulated environments. Skilled in endpoint protection, OS hardening, Microsoft Defender for Endpoint, vulnerability management, SIEM telemetry, incident response, zero trust, IAM, cloud security, and NIST/ISO/PCI/FedRAMP compliance. Brings a platform mindset to endpoint security through policy-driven configuration, staged rollout, patch enforcement, automation, and cross-functional partnership with Security, IT Operations, infrastructure, and developer teams.

Security Architect - Navy Mutual - Alexandria, VA

(2024-12)

Lead enterprise security architecture and secure‑by‑design initiatives across development and production environments.

• Design and implement Microsoft Defender for Endpoint and related Microsoft Defender capabilities as policy-driven endpoint protection, detection, and response controls across the enterprise.
• Implement Microsoft Purview data protection and governance controls to support information protection, compliance, and regulatory requirements.
• Implement Microsoft Zero Trust Architecture across enterprise platforms, strengthening conditional access, governance, device-trust alignment, and security control enforcement.
• Responsible for cloud security, Generative AI security, and management of third‑party AI‑use applications.
• Turn endpoint, identity, cloud, and network telemetry into SIEM dashboards, alerting, log analysis workflows, and incident response visibility for early detection of control gaps and drift.
• Identify security issues and design and implement security controls, tools, and services to improve enterprise security systems, monitoring, and incident response processes.
• Implement and manage a Tenable-based vulnerability management program, prioritizing remediation, tracking enforcement progress, and partnering with operations teams to reduce exposure while maintaining user productivity.
• Define endpoint and security control rollout approaches that emphasize testing, staged deployment, remediation ownership, rollback planning, and measurable compliance rather than static reporting.
• Administer Fortinet security platforms (FortiGate, FortiClient EMS, FortiAnalyzer) and implement network DLP controls.
• Coordinate penetration testing, analyze findings, and drive remediation to closure.
• Mentor junior technical staff by providing guidance on security architecture, implementation practices, and operational problem solving.

Senior Information Security Engineer - Arent Fox Schiff - Washington, DC

(2022-01 - 2024-12)

• Designed and implemented cloud‑native and hybrid security architectures across AWS and Azure.
• Implemented Microsoft Defender security stack as a unified, policy‑driven security platform.
• Led risk-based vulnerability and patch prioritization using Tenable and SIEM platforms, translating findings into remediation plans, dashboard reporting, and operational follow-through.
• Collaborated with internal teams to investigate and contain security incidents, performing log analysis and supporting forensic review to identify attacker TTPs, indicators of compromise, and remediation priorities.
• Designed secure AWS S3 architectures including encryption, access controls, and logging.
• Developed CIS benchmark-aligned Windows desktop, server, and Cisco firewall hardening standards, supporting endpoint compliance, secure baseline definition, and measurable control enforcement.
• Administered Cisco Umbrella and adjacent security controls to support secure access, DNS-layer protection, and endpoint-adjacent policy enforcement.
• Managed enterprise penetration testing and remediation lifecycle.
• Communicated security risk, endpoint hardening decisions, and architecture tradeoffs to technical, operational, and business stakeholders.

Security Engineer - WilmerHale - Washington, DC

(2013-12 - 2021-12)

Identified security issues and designed and implemented security controls, tools, and services to strengthen enterprise security systems and processes in a highly regulated legal environment.

• Administered endpoint and security platforms including Splunk Cloud, McAfee DLP, Cylance, FireEye, and Absolute, supporting endpoint visibility, policy enforcement, and incident response.
• Conducted host forensics, network forensics, log analysis, and malware triage in support of incident response investigations while building threat-hunting dashboards and SIEM log aggregation architecture.
• Designed and managed federated identity architecture (ADFS).
• Led vulnerability assessment board operations using risk-based methodologies aligned with NIST, driving remediation accountability and control validation across enterprise systems.
• Managed enterprise PKI and certificate lifecycle using DigiCert.
• Produced technical and executive security documentation.
• Recognized and codified attacker tools, tactics, and procedures (TTPs) and indicators of compromise (IOCs), and collaborated with internal and customer teams to investigate and contain security incidents.

Certificate - Applied Generative AI - Johns Hopkins University

B.S.

• Cyber Security Management & Policy - University of Maryland Global Campus

Certificate - Project Management for IT Professionals - University of Maryland Global Campus

Certificate - Information Assurance - University of Maryland Global Campus