"Encrypted at rest" didn't stop this month's wave of secret theft
A platform that runs your code has to be able to decrypt your secrets. Why the controls that decide blast radius live at the issuer.
Product Security · AI Security
Chief Product Security Officer (CPSO)
Real-world cybersecurity expertise across architecture, product and AI, backed by 70 granted patents in security, firmware, cloud and more.
01 / About
I build security the way products actually get built: from the problem customers feel, through architecture and engineering, to something teams can ship and operate.
Across enterprise and cloud environments I have owned product security and security architecture end to end: threat modeling and secure design, Secure SDLC gates, cloud and AI agent security, and the risk decisions that R&D and leadership need to move. That span comes from engineering roots. I know how systems are designed, coded, integrated and run, so the controls I define fit the product rather than sitting beside it.
The same drive shows up as invention I actually shipped into platforms. My 70 granted patents span security, AI, cloud and infrastructure, including deep work on hardware root of trust, firmware and BIOS protection and recovery, and system hardening. I also served as a judge on three Dell patent committees (Cybersecurity, Infrastructure and Cloud). Today I own security capabilities and AI agent security across a large product portfolio, and served as Chief Product Security Officer for the division.
02 / Expertise
Hands-on depth in architecture and threat modeling, combined with the product and leadership side of security.
Security requirements, release gates and risk decisions across a product portfolio, translating technical risk into clear decisions for R&D and executive leadership.
Systematic threat modeling and secure design review, from STRIDE and attack trees to the mitigations in product design, plus security scanning as a standard SDLC gate, CI/CD and supply chain security.
Defining what each AI agent may access and the credentials it runs with, alongside cloud security across AWS, GCP, Azure and hybrid environments.
Translating the EU AI Act, CRA and ISO 42001 into concrete product requirements, and identifying where product investment is needed.
Led development teams and a team of architects, with mentoring across R&D and product, while driving cross-functional security decisions with executives.
Inventor of 70 granted patents and a judge on three Dell patent committees, turning emerging security needs into protected technology.
03 / Patents & Innovation
granted patents
across security, AI, cloud and infrastructure
Protects firmware by encrypting it, splitting it across multiple recovery chips, and requiring pieces from at least two chips before it can be rebuilt.
Google PatentsProtects BIOS access with multi-factor authentication that checks a digital identity token against an MFA chip on the device.
Google PatentsDetects ransomware by scoring system-call patterns during an encryption phase and triggering protection when a process crosses a threshold.
Google PatentsValidates hardware integrity by comparing live platform configuration values to a trusted table and triggering remediation when they do not match.
Google PatentsDetects unauthorized communication in a hybrid cloud environment.
Google PatentsUses a host agent to help detect malicious attacks against a storage array.
Google Patents04 / Insights
A weekly recap, "What happened in Cybersecurity this week", plus shorter takes on incidents through an architecture lens.

A fake job interview behind a record crypto theft, AI-driven attacks named in official breach disclosures, and why "rotate everything" is the only answer after a platform breach.
A platform that runs your code has to be able to decrypt your secrets. Why the controls that decide blast radius live at the issuer.
Backup services are de facto tier-0 non-human identities, yet threat models often file them under "third-party integration".
05 / Experience
Jul 2024 - Present
Amdocs
Owns product security for the division: security requirements, architecture and release gates across the portfolio. Technical product owner for security capabilities on a cloud-native microservices platform underlying 7 product suites, including AI agent security requirements and release gates.
2022 - 2024
Dell Technologies
Researched and shaped future cybersecurity capabilities for Dell infrastructure, storage and cloud products, protecting the resulting inventions through patents. Set secure-by-design direction and security architecture across those product lines, led threat modeling for major products, and judged on three patent committees.
2020 - 2022
Dell Technologies
Founded the cybersecurity domain from zero and owned its end-to-end architecture, a microservices platform with more than 50 integration points. Managed a team of architects.
2016 - 2020
Dell Technologies
Led developers and QA as the team's architect, delivering cybersecurity products for hybrid and multi-cloud environments on AWS, GCP and Azure.
2015 - 2016
Hachshara Insurance
Led a development team through legacy modernization in a regulated insurance environment.
2007 - 2015
Clalit Health Services
Built BI solutions and led critical data migrations while keeping systems continuously available.
06 / Contact
Always happy to connect about product security, security architecture and AI security, including the right next challenge.