📍 Eugene, OR | 🛡️ Cybersecurity Compliance Coordinator @ BizCare | 🎓 President, UO Cybersecurity Club
I build security systems at the seam where governance meets engineering — compliance programs that run on automation, SOC workflows that produce decisions instead of alerts, and partner-facing enablement that makes complex security products land with the people who have to sell and deploy them.
Graduating June 2027 — seeking new-grad solutions engineering and partner-facing security roles.
- Cybersecurity Compliance Coordinator @ BizCare, Inc. — compliance ownership across a 22-client book: control automation over 100+ endpoints, attack-surface reduction, and a third-party risk management program run on Secureframe.
- President — University of Oregon Cybersecurity Club. Running a three-CTF series (one per term, scaling regional → statewide → national) and the club site rebrand.
- Co-lead — IRUN (Incident Response University Network): a community incident response help center at UO. A personal-SOC model for individuals rather than enterprises — enterprises get SOC teams, individuals get nothing to call when something goes wrong.
I run a continuous security innovation pipeline: friction observed in a real SOC, clinic, or partner channel becomes deployable tooling.
Signal → Hypothesis → Build → Field Test → Operational Lift
- Security Engineering: building tools that turn security concepts into working systems
- SOC Workflows: incident triage, enrichment, and operational decision support
- Risk Quantification: translating technical findings into actionable risk signals
- GRC at Scale: CIS IG1, NIST AI RMF, FTC Safeguards, and TPRM as automated programs, not documents
Quantitative risk scoring built for the UO Teaching SOC on TheHive + MISP + Cortex, with dual models:
- B2B: Annualized Loss Expectancy (ALE)
- B2C: Recovery-difficulty scoring for identity theft scenarios
Makes university service status pages readable. They're exhaustive about outages and nearly useless to the people affected by them — StatusBridge restructures that information for the reader.
Security-focused OpenClaw variant that reduces the top vulnerability classes and aligns AI orchestration with NIST AI RMF goals.
Pre-click QR safety validation — threat-intelligence and URL checks that run before the code does.
AI orchestrator that won "Best Implementation of Google Gemini API" at a 2025 MLH hackathon.
Automation stack for realtor workflows — Next.js app + n8n orchestration.
- purple-mcp — MCP access to SentinelOne Purple AI and security services: alerts, vulnerabilities, misconfigurations, inventory
- BackdoorsAndBreaches_Personal_IR_Hotline — IR tabletop extensions for university SOC teams supporting individual incident response
Partner Solutions Engineer Intern — SentinelOne, Inc. · Jun 2026 – Aug 2026 Architected the Partner Success Kit, a unified partner-enablement standard replacing the siloed approaches separate partner-facing teams had each built during the company's growth. Ran discovery with 10+ stakeholders across two MSSP partners, which restructured the work into a partner handbook replacement for onboarding plus a recurring Partner Health Check that turns existing-partner feedback into a product-development input. Presented to the Solutions Engineering organization, Talent Acquisition, and the full intern cohort.
SOC and Compliance Analyst — UO Teaching SOC (T-SOC) and Risk Clinic · Oct 2025 – Jun 2026 Built custom Grafana dashboards on the SentinelOne Data Lake and XDR APIs for SOC and end-customer telemetry visibility. Monitored real-time telemetry across university infrastructure and contributed to incident response and threat-hunting SOPs. On the Risk Clinic side: translated federal cybersecurity grant requirements (SLCGP) into plain language for municipal water districts alongside the Oregon branch of CISA, ran client webinars, and developed a financial-risk assessment framework for security budgeting.
IT Help Desk Technician — BizCare, Inc. · Nov 2021 – Dec 2024
- B.S. Cybersecurity — University of Oregon · Expected June 2027 Coursework: Applied Cryptography, Computer/Network Security, Secure Software Development
- Galactic Advisors Certified Compliance Consultant (GC3)
- Platform depth: Singularity XDR, Singularity Data Lake, Secureframe, Grafana, Splunk, TheHive, MISP, Cortex, Burp Suite, OpenVAS, Docker
If you're hiring for a technical cybersecurity role, I'd love to connect.