Building intelligent
defenses against
human & AI adversaries
Technical PM specializing in AI-powered products for adversarial spaces: security, anti-fraud, and finance. Deep learning and security focus.
With over a decade of experience across startups and Fortune 500s, I build ML products that address adversarial problems in security, anti-fraud, and financial markets. Drawing from a double major in Computer Science and Economics, I thrive at the intersection where CS meets economic reasoning.
I've managed products and built software across Fortune 500 companies, startups, and the open-source community, shipping features now used by over half a billion people.
During nearly 6 years at Microsoft, I held key PM roles combining ML, data science, and security to steer the core security features of Defender for Office 365, innovating two patents in security and deep learning.
At DoorDash, I established product strategy across multiple anti-fraud verticals, driving bottom-line fraud reduction with minimal user friction. Pioneered mitigations for location spoofing, mobile app hooking, fake identities, account compromise, and account sharing.
At Sublime Security, I serve as the 2nd PM hire and people leader, spearheading the launch of the Autonomous Security Analyst (ASA), an AI agent that automates end-to-end threat investigation using LLMs, computer vision, and behavioral analysis. Beyond the AI work, I drive product efficacy across the full detections platform, own the KPI framework for measuring detection quality, and lead the team as a people manager shaping culture and PM development.
Co-founded multiple bootstrapped startups including a marketplace for financial analysis tools and a mobile development company with apps amassing 90,000+ downloads.
What I build
-
Adversarial AI & SecurityMicrosoft · Sublime · Ethical Hacking
-
Anti-Fraud SystemsDoorDash · Boosted trees · Human-in-loop
-
Transformers & LLMsEncoders · Agents · RAG · Fine-tuning
-
Classical ML & Product OwnershipXGBoost · OCR · SHAP · model lifecycle
-
Engineering DepthAWS · Docker · Linux · CI/CD
-
Detection PlatformSublime MQL · Open detections · Roadmap
# Adversarial AI & Security Owned product roadmap & KPIs for **Safe Links** and **Safe Attachments** across Office 365, ML-powered defenses reaching 500M+ users daily. ## What I shipped - Phishing + malware classifiers with adversarial red-team PoCs - **LLM vulnerability scanning** and prompt injection research - Sender profile models and ML attack scoring at Sublime Security - ASA: autonomous security analyst agent using LLM reasoning ## Credentials - Ethical hacking background; red-team PoCs against own production systems - Threat modeling across ML pipelines and email infrastructure > 2nd PM hire at Sublime owning the full ML & detection roadmap
# Anti-Fraud Systems Bootstrapped **3 anti-fraud areas** combining human-in-the-loop and ML-driven solutions. Drove bottom-line savings with minimal user friction across Dasher, Consumer, and Merchant. ## Mitigations pioneered - GPS location spoofing detection - Mobile app hooking attacks - Fake identities & synthetic accounts - Account compromise + account sharing XGBoost · LightGBM · human-in-the-loop review queues
# Transformers & LLMs Ship production transformer systems, from encoder-based classifiers to agentic LLM applications. Focus on fine-tuning, evaluation, and measurable outcomes. ## Models worked with - **Encoders**: BERT, DeBERTa - **Embedding models**: SBERT, Harrier-OSS - **Open-weight generative**: Llama, Mistral, LLaVA, Phi, Qwen, DeepSeek, Mixtral, Gemma, Kimi - **Proprietary**: GPT, Claude, Gemini - **Reasoning**: o-series, Claude extended thinking, DeepSeek R1, Gemini thinking ## Applications - **Agentic AI**: multi-step reasoning with tool use, MCP, and chain-of-thought - **Fine-tuning** BERT-family encoders on adversarial samples - Agentic pipelines that identify classifier blind spots and curate targeted training data - **ASA**: autonomous threat investigation pipeline - RAG + semantic search over security corpora - Multimodal prompting for classifier development > Strong bias toward production-grade deployments with clear KPIs
# Classical ML & Product Ownership Product owner across the classical ML stack, intimately involved in model design, training data strategy, evaluation, and deployment. The unglamorous models that quietly keep fraud rates low and pipelines running are the ones I tend to own end-to-end. ## Models & techniques - **XGBoost / LightGBM**: fraud scoring, risk classification, threshold tuning - **OCR & QR scanning**: document extraction and barcode pipelines - **SHAP**: model explainability for trust, review queues, and compliance - Anomaly detection: unsupervised + semi-supervised methods - Bayesian inference for uncertainty quantification in scoring - Precision / recall tradeoffs anchored to business cost functions ## Process - Balance speed vs. accuracy for real-time scoring systems - A/B test design, experiment analysis, and metrics definition XGBoost · LightGBM · scikit-learn · SHAP · PyTorch > The load-bearing workhorses, not the showhorses
# Engineering Depth Shipped production backend systems across enterprise and startup environments, from microservices to CI/CD infrastructure. ## Platform - AWS: ECS, Lambda, S3, RDS, microservices at scale - Docker: multi-stage builds, containerized deployments - Linux: system administration, iptables, server hardening ## Practices - **CI/CD**: reduced test cycle from 1 week → 9 minutes - REST APIs with JBoss/Wildfly, Hibernate, async processing - Multithreading, high-performance backend systems Python · Java · AWS · Docker · Linux · JavaScript
# Detection Platform Product manager on **Sublime MQL**, the domain-specific query language behind our continuously-iterated open detection library. Work with the detection team to identify efficacy gaps and shape new MQL functionality as attacks and threats evolve. ## Shipping at scale Work within tight runtime, RAM, and cost budgets across both cloud and self-hosted deployments. Continuously balance latency, detection efficacy, cost, and scale.
Work history
-
Product Manager, Detections2nd PM hire and people leader. Established the company's full efficacy KPI framework from scratch -global and per-customer FN/FP rates, weighted kappa, F1, and precision/recall time series. Driving product across detections, applied ML, NLU, AI agents, and MQL. Spearheaded launch of ASA (Autonomous Security Analyst) -an AI agent automating threat investigation using LLMs, computer vision, and behavioral analysis. Wrote detection rules shipped globally while maintaining low false positive rates.2024 → Present
-
Product Manager, Anti-Fraud
Established product and strategy across multiple verticals focused on stopping fraud with minimal user friction. Consistently ranked top 5% of PMs company-wide in performance reviews. Bootstrapped 3 anti-fraud areas combining human-in-the-loop and ML-driven solutions. Pioneered mitigations for location spoofing, mobile app hooking, fake identities, account compromise, and account sharing.2022 → 2024 -
Senior Program Manager
Nearly 6-year tenure combining ML, data science, and security. Steered development of core security features for Microsoft Defender for Office 365, protecting 500M+ users from phishing and malware. Sole inventor of two patents applying deep learning to security. Created attack proof of concepts including phishing kits, sandbox evasion, and timing attacks to design and prioritize improvements. Earlier role managing Visual Studio site scalability, coordinating with 100+ internal partners on product launches.2016 → 2022 -
Software Engineer
Built microservices on AWS (Java, Python, Node.js, Docker) for the Intelligent Middleware Team. Developed a CI/CD framework that reduced test cycles from one staff week to 9 minutes.2014 → 2016 -
Co-Founder
Co-founded RNKR (two-sided marketplace for quantitative analysis tools), AFK Applications (mobile apps with 90k+ installs), and Unbeatable Machines (web development studio).Founder
US Patents
Dynamic False User Accounts
Techniques for generating and deploying dynamic false user accounts (honeypots) that are indistinguishable from real users to deceive malicious entities.
View on Google PatentsPolluting Phishing Responses
Systems for analyzing phishing messages and automatically responding with fake sensitive information to pollute the attacker's data and disrupt collection pipelines.
View on Google PatentsSelected projects
-
01
GPT assistant that turns Todoist tasks into clear next steps
-
02
Parallel data pulls for Pandas & Quandl -published on PyPI
-
03
Rapid deployment of iptables with security & sysadmin utilities
-
04
Opportunity cost calculator for purchases
-
05
Annotated CS classics with animated explainers
-
06
MIT-licensed guides crowdsourcing expertise from practitioners