I make security legible to the people who have to decide about it.

I have spent more than ten years in cybersecurity and IT (engineering, consulting, project management, and leadership), working with large corporations, government agencies, and non-profits. The through-line has been translation: taking a technical reality and making it usable by whoever needs to act on it, whether that is an engineering team, a board, or a jury.

Day to day, that work is offensive. I lead the penetration testing practice at CLA (CliftonLarsonAllen), where my team runs engagements for clients ranging from Fortune 100 enterprises to small and mid-sized businesses, across industries from agribusiness and manufacturing to financial services, health care, and government. The team covers the full attack surface rather than a slice of it, so the seams between one test and the next do not become the way in. More on that in security testing.

Academically that started with an Associate and a Bachelor's degree in Information Systems Technology with a cybersecurity specialization, plus a technical certificate as an Information Technology Client Specialist. Since then I have added more than fifteen IT and cybersecurity certifications, including the CISSP.

Alongside the consulting work I run Show Up Show Out Security, which houses the mentorship program, and I publish original vulnerability research, including assigned CVEs, under my own name. I am also a professional mixed martial artist, which is how a fair amount of the press coverage found me, and the founder of iVenza, an all-in-one platform for athletes, coaches, and gyms.

The reason I write and speak as much as I do is simple: most security failures I have seen were not exotic. They were ordinary problems that nobody explained clearly enough to the person who could have prevented them.