Resume

ByteDance

Sr. Security Engineer, TikTok · San Jose, CA

• Threat modeling and implementation reviews for new features and existing services. Built systemic fixes like log masking to stop classes of issues from coming back.
• Built a prioritization tool for incoming security review using an LLM and a structured questionnaire. Cut triage volume by about 60%.

Dropbox

Security Engineer, HelloSign · Seattle, WA

• Rolled out CSP for the HelloWorks webapp: 1M+ reports handled, 500+ refactors to get the policy clean.
• Designed and shipped a compromised-credentials check that prompted about 5% of users to rotate their passwords.
• Added and tightened linting and static-analysis tooling in CI/CD.

Facebook

Security Engineer · Seattle, WA

• Security reviews for new products and features (FB Shops, internal apps).

Lyft

Security Engineer · San Francisco, CA

• Integrated security into the SDLC, including risk ranking for new features via a structured questionnaire.
• Used SAST tooling to find classes of issues across the codebase.
• Cut overall Chrome extension risk across the company by about 90%.

Box

Security Engineer · Redwood City, CA

• Code-level and black-box appsec assessments, design reviews, and threat models for new features and products.
• Researched and deployed CSP, Referrer-Policy, and other protections in internal environments.

NCC Group

Security Intern · San Francisco, CA

• Shadowed consultants on web and mobile penetration tests and external network assessments.
• Triaged reports for third-party bug-bounty platforms.

University of Alabama, Huntsville

M.S. Cybersecurity · Computer Science concentration