About
I spent close to twenty years in the U.S. Army and the Massachusetts Army National Guard doing intelligence operations, from enlisting in 2001 to retiring in 2018. I specialized in human intelligence collection, which is essentially anything that has to do with talking to people, and I managed intelligence operations across the Middle East, Africa, the Balkans, and Southeast Asia, with assignments that included Kosovo, Iraq, Morocco, and Gabon. Much of that work was team building: putting together small special-purpose teams and mixing specialties across them.
From 2013 to 2017 I was the senior intelligence collector and operations manager for the Massachusetts Army National Guard, on Active Guard Reserve status. I managed readiness, training plans, and logistics for more than seventy military intelligence professionals, ran an annual budget of more than ten million dollars, and held a 98 percent readiness metric. Around 2016 I started thinking about what came after the Army. I knew it would be cybersecurity; the question was how to make the jump from analog to digital.
The answer came in 2017 at Fort Devens, where I was a counterintelligence analyst on an insider threat team supporting operations in Afghanistan. Our early low-code automation tool broke mid-mission, and the mission involved crunching big data. Out of desperation and curiosity I found a book on VBA in the electronic library and taught myself enough to build Excel macros that batched the work through in smaller sets and got the same outcome. That was my aha moment. I realized I could do the digital side, and I went into cybersecurity face first.
My first stop was MIT Lincoln Laboratory, as an Information System Security Officer. That is where I learned the compliance side of the house: the NIST Risk Management Framework, SP 800-53, continuous monitoring, the whole works. It was special being at MIT, but I worked in the basement of a basement and never saw sunlight, and I knew I could not keep that up for long. So I Googled "machine learning plus cybersecurity", Recorded Future came up, and three days later I was employee 51.
I stayed at Recorded Future four years, from 2018 to 2022, growing from customer success consultant to principal and strategic accounts, then to Product Architect for Data Science. On the accounts side I advised a portfolio of more than thirty million dollars in annual recurring revenue, worked directly with Verizon Business as it built a new threat intelligence service on our data, and contributed research to two Verizon Data Breach Investigations Reports. The project I am proudest of started as a side build: clients could not have the ROI conversation with their CISOs, so I wrote scripts that pulled their usage metrics and produced reports. It grew to more than 150 clients and the product team built a page in the platform for it. That led to the product role, where I sat between the field and the head data scientist and helped bring new data sets and modules to market. Through that work I saw a bigger problem upstream: teams were buying serious threat intelligence data without the background to run an intelligence operation around it. I called it CTI advisory, made the case for it, and decided to go solve it myself.
I took two CTI leadership roles next, between 2022 and 2023, to learn what it takes to build these programs operationally from scratch. At Pondurance, a managed detection and response provider, I built the threat intelligence function from nothing: an intelligence provider, a homemade threat intelligence platform, and daily, weekly, and monthly reporting into the SOC. Some key people then moved to Revelstoke and brought me along as a Solution Architect and CTI advisor, up until Revelstoke's acquisition by Arctic Wolf, which dovetailed with an offer from Accenture.
At Accenture, from 2023 to 2026, I joined the Cyber Intelligence group as Deputy Director of Strategy and Services and got to build the advisory service I had been arguing for, from the ground up: the workshop materials, the talk tracks, the delivery design, the pricing, the first proposals and statements of work. The result was a three-tier service with a maturity assessment at its front, sold to marquee enterprise brands, Verizon among them, and delivered by a team I built. I also helped bring strategic alliances with Google's Mandiant and with Recorded Future across the line. Toward the end I did extra work with the Secure AI team on AI threat landscaping, and I got the AI bug.
In March 2026 Corelight recruited me as Principal Product Manager for AI-Driven Security Response, to help build their AI story and strategy. I owned the voice of the customer for their sensor-only base, stood up a design partner program, got their Model Context Protocol work into early adopters' hands, and reframed the AI product strategy around one set of outcomes delivered in two flavors, SaaS and sensor-only, rather than two products for two groups. The role wrapped up in August 2026.
Today I am building AI things and AI security things, working fully AI native, because I see that as a big problem. This site is the portfolio. You can also find me on LinkedIn. Anything else, .