Leads secure code reviews across web, mobile, API, embedded, and cryptographic systems; identifies vulnerabilities and provides actionable remediation guidance. Conducts application penetration testing, threat modeling, secure design reviews, and SDLC advisory engagements. Serves as a senior technical client representative, mentors consultants, contributes to AppSec methodologies and research, supports pre-sales, and participates in industry events and published security research.

Lead and deliver complex OT security engagements across ICS and embedded industrial devices. Perform hands-on testing, threat modeling, and Purdue-model network reviews, translate technical findings to business risk, mentor junior consultants, contribute OT research and methodology, and support pre-sales. Travel to industrial sites (~30%).