Product builder · Applied AI · Cybersecurity & GRC
Twenty years in security and compliance, from Unix admin to consultant to Principal PM. I talk to the customer, prototype the answer myself, land the production PRs with the team, then cut the launch video. A recruiter’s shortcut: everything below links to something real.
The arc
Operations taught me what breaks. Consulting taught me to listen. Product taught me to decide. Building with agents put all three back in my own hands.
How I work
Discovery calls and real-user validation first. Consulting taught me to find what's actually wrong and earn trust while doing it.
I build the first version myself with Claude Code and Cursor, then land production pull requests alongside the engineering team.
Docs, positioning and the launch video are part of shipping. I produce ours in Remotion with ElevenLabs voice.
Selected work
Personal products I built solo, and DataBee products I own end to end. Each card links to the live thing or its public documentation.
Hail hit. Nobody's roofed it yet. Here's the list. A bot-first data product for roofing sales teams: hail swaths laid over the cities' own permit records, served to any AI through an MCP door. Designed, built, deployed and operated solo, with a multi-agent landing pipeline doing the engineering legwork.
Ask questions about your TikTok data in plain English and get generated charts, metrics and insights back. Ships its own MCP server so Claude Desktop, ChatGPT or Claude Code can connect as clients.
A natural-language interface that turns a plain-English question into accurate SQL against normalized security and GRC data.
Access recertification that replaces standalone governance tooling and the spreadsheet-and-shared-drive workflow around it.
Gap analysis against NIST CSF v2.0, PCI-DSS v4.0.1, CIS CSC v8.1 and other major standards, with a Knowledge Base of control documentation and one-click audit PDFs.
A tenant-aware ticketing system with role-based access, so support teams work across customer environments without elevated privileges.
Ranks every line-of-business application by measured exposure, joining scanner findings with CISA KEV and EPSS threat intelligence, and collapses the vulnerability backlog into the few fixes that clear it, routed to the teams that own the servers.
A unified detection console on Suricata and Zeek, powered by BluVector, producing PCI DSS evidence without a separate data pipeline.
Launches & talks
Product and feature launch videos I produced myself as React components in Remotion, voiced with ElevenLabs. Plus the Frontier AI Defense session.
Experience
Skills
Contact
