Led CISA's Secure by Design Pledge, securing commitments from over 250 software manufacturers including Google, Microsoft, and AWS.
Authored the Securing Open Source Software Act—the first legislation focused specifically on open source software security.
Led development and deployment of Crossfeed, CISA’s first passive, opt-out vulnerability scanning program, covering all 50 states and over 2,500 counties ahead of the 2020 election.
Advised IT-ISAC on rebuilding ties between the hacker community and election vendors, resulting in the first vulnerability disclosure policies for voting machines.
Launched Ransomwhere, the first public tracker of ransomware payments.
Discovered a temporary workaround for a nascent ransomware strain, saving 50 victims $27,000 and earning recognition from the U.S. Secretary of Homeland Security.
Organized a sign-on letter reaffirming the importance of security research in response to a Supreme Court amicus brief, signed by over 50 stakeholders including Congressman Jim Langevin; cited in the petitioner’s reply brief.
Published 'Showing the Receipts: Understanding the Modern Ransomware Ecosystem' (Symposium on Electronic Crime Research, October 2024).
Co-authored 'Money Over Morals: A Business Analysis of Conti Ransomware' (Symposium on Electronic Crime Research, December 2022), which received a Best Paper Award.
Co-authored 'A Systematization of Voter Registration Security' (Journal of Cybersecurity).
Co-authored 'A Tale of Two Markets: Investigating the Ransomware Payments Economy'.
Research Experience
Currently CEO and Co-founder at Corridor.
Former Senior Technical Advisor at the Cybersecurity and Infrastructure Security Agency (CISA), leading efforts on Secure by Design and open source software security.
Served as a TechCongress Fellow for Senator Gary Peters, advising on cybersecurity policy including election and open source software security.
Previously worked as a Security Architect at Krebs Stamos Group.
Served as an Election Security Technical Advisor at CISA, where he created Crossfeed to scan election infrastructure nationwide.
Joined the Defense Digital Service right after high school following his win in the Hack the Air Force challenge; helped run the Hack the Pentagon bug bounty program and advised on the DoD Vulnerability Disclosure Program.