AI · Cybersecurity · Product · Strategy
AI and cybersecurity product leader with 15+ years of experience across companies including F5 Networks, Datadog, Chainguard and DataRobot. Co-founded the AI Security Alliance (AISECA), and conducts ongoing research into AI supply chain security. Offers product management coaching, consulting, fractional CPO services, and AI and security strategy guidance.
Boston, MA · Speaking, coaching, consulting & fractional CPO inquiries welcome
Speaking
DEF CON 34 — MEACS Community, LVCC Exhibit Hall West 4 - 1306, Las Vegas, NV
A map of every place an agentic system can be turned against its user, from the instructions it reads to the marketplaces it trusts, followed by what defending it actually takes.
DEF CON 34 — MEACS Community, LVCC Exhibit Hall West 4 - 1306, Las Vegas, NV (with Karol Piekarski)
Introduces the AISECA Tiered Control Framework, an open, community-built model for defending agentic workflows in layers, with a deep dive on one control to show how it composes with the rest.
DEF CON 34 — MEACS Community, LVCC Exhibit Hall West 4 - 1306, Las Vegas, NV
A walk through what breaks when AI artifact scanners run a corpus of malicious and benign agent skills, why the loudest tools are often wrong, and what it would take to build a scanner you can actually trust.
DataRobot — recurring hands-on workshop
A live lab on building and shipping AI agents. Delivered five times across London, Washington DC, Boston, Dallas, and New York, with more sessions planned.
DataRobot
Why production-ready agents come down to developer experience, agent identity, observability, and token economics, not the model or the prompt.
Boston Security Meetup, hosted at 7AI
Three pillars for teams shipping AI: secure-by-default design, agent identity as a first-class citizen, and supply chain instrumentation across the full lifecycle.
Mountain View, CA
On the gap between an agent demo and something a company can actually run in production. Shared the stage with speakers from Cursor and RX-M.
Washington, DC
Enterprise agent deployment for the public sector.
Boston, MA
Ran a hands-on DataRobot agent-building workshop (standing room only, 30+ agents built in under two hours), spoke on storytelling and sacrifice in product development with fellow Simmons University alumnae, and moderated a security panel and mixer with Scrut Automation, DigitalOcean, Citizens, and Monad.
KubeCrash Spring 2026 (virtual)
Panel moderated by Beatriz Datangel Rodgers, alongside Lisa Tagliaferri and fellow practitioners.
On consolidating security tooling without losing coverage.
DASH — Datadog's annual conference
Panel with three fellow Datadog ERG leaders on the programs behind the impact.
Webinar, BankInfoSecurity
Podcasts
Bare Knuckles and Brass Tacks
Recorded just after RSA Conference. On why so much of what's sold as AI security is really cloud security with new branding, and the discoverability problem underneath it.
with host Joshua Brumley
Data protection fundamentals for law firms: access controls, encryption, and verifying who's actually on the other end of a request.
Writing
Regular contributor on agentic AI, developer tooling, and building for production.
Chainguard, with Matt Moore and Anushka Iyer
Featured in Datadog's annual report
On why minimal, distroless images shrink the attack surface.
VentureBeat
Research
with Duc-Ly Vu, Thang Ho, Hoang-Ly Nguyen, Thai-Minh Truong, and Thanh M. Truong-Le
with Thanh M. Truong-Le, Hoang-Ly Nguyen, Thang Ho, Thai-Minh Truong, and Duc-Ly Vu — unpublished
with Ly Vu, Thang Ho, Thanh Truong, and Ly Nguyen — unpublished
Journal of the Acoustical Society of America
Acoustical Society of America
Community & Leadership
Founding Board Member
Building a practitioner-led AI security maturity framework, vendor-agnostic by design.
Founding Member
Cyber Women of Boston
Organizer
Speaking Topics
Socials