Senior software security engineer who

Currently at Carta. Previously Sourcegraph, Dropbox, Yelp. Building Code Pathfinder, an open-source static code analysis engine (AI-Native), and writing about finding vulnerabilities in the wild. Curates vulnerability datasets using Code Pathfinder for CVE variant analysis and fine-tunes LLMs locally to achieve precision analysis beyond traditional static code analysis.

Bikes long distances, reads on Kindle, and embraces value investing. Based in Waterloo, Canada.

Code Pathfinder ↗ Static code analysis engine for modern security teams
SecureFlow CLI ↗ AI-powered security scanning with 12+ model support