Experience

Zelda Ventures

• Venture Capital and Private Equity Principals
• 1 - 100 Employee

• Investor

  • Oct 2022 - Present



Acquired Wisdom Fund

• United States
• Venture Capital and Private Equity Principals
• 1 - 100 Employee

• Investor

  • Oct 2021 - Present



Stytch

• United States
• Software Development
• 1 - 100 Employee

• Angel Investor

  • Mar 2021 - Present



Grove XR

• Software Development
• 1 - 100 Employee

• Angel Investor

  • Dec 2020 - Dec 2022



Synopsys Inc

• United States
• Software Development
• 700 & Above Employee

• Director of Software Engineering; Principal Engineer; Architect

  • Jan 2020 - Jan 2022

  Joined Synopsys through the acquisition of Tinfoil Security, which I founded and ran. Led the architecture team of three products: * Seeker IAST (Interactive Application Security Testing): https://www.synopsys.com/software-integrity/security-testing/interactive-application-security-testing.html * Tinfoil DAST (Web and API Scanning): https://www.tinfoilsecurity.com/ * Architected a new API Security initiative and team that focuses on full integration across the SDLC, along with our counterparts in managed services, particularly for contextual analysis of, and finding vulnerabilities in, GraphQL and RESTful APIs. The tools we built rely on deep integrations into existing developer workflows as well as algorithmic analysis of APIs and their documentation in order to find the quickest and most thorough path to assess an application, in addition to finding vulnerabilities within the application, dependent on that analysis. Also responsible for cross-team collaboration efforts across the company, prototyping new products, assisting in architecture and design efforts across the company, and generally finding ways to make the whole greater than the sum of its parts. Heavily involved in PR and diversity initiatives as well. I wear many hats. :) Show less



Tinfoil Security

• Mountain View, CA

• Cofounder & CTO

  • Mar 2011 - Jan 2020

  Tinfoil Security provides security for DevOps. It looks for application vulnerabilities and is focused on developers and full automation with your development and deployment workflow. It has the best vulnerability coverage on the market, as shown by industry-standard benchmarks (see http://sectoolmarket.com) and has an incredibly easy to use API, allowing for effortless integrations with your continuous integration, deployment, and issue tracking systems. By empowering developers to fix vulnerabilities before they become a problem, security teams are empowered to focus on the bigger picture again, rather than fighting yet another fire in production. As founder and CTO, I did just about every job there was to do, from software engineering to managing a team to fundraising to enterprise sales to coaching to taking out the trash. I spent more time playing the 'founder' role than the 'CTO' role, simply due to what the team and company needed at any given time; as the technical leader, I recruited a world-class team that I would put up against any other team in the valley or elsewhere. Show less



ManTech

• United States
• IT Services and IT Consulting
• 700 & Above Employee

• Senior Intrusion Engineer

  • 2009 - 2011

  Offensive software security for the intelligence community and DoD. Offensive software security for the intelligence community and DoD.



Apple

• United States
• Computers and Electronics Manufacturing
• 700 & Above Employee

• Core Build Technologies Engineer

  • Jun 2008 - Jan 2009

  Responsible for (from scratch) extending the build system for all the software Apple ships to include a centralized binary server, where all the binaries would go for viewing and use in other processes. Responsible for (from scratch) extending the build system for all the software Apple ships to include a centralized binary server, where all the binaries would go for viewing and use in other processes.



MEET - Middle East Entrepreneurs of Tomorrow

• Israel
• Civic and Social Organizations
• 1 - 100 Employee

• Instructor

  • Jul 2007 - Aug 2007

  MEET is an MIT-affiliated program that aims to teach Palestinian and Israeli teenagers computer science, giving them a common language and bridging the gap without using politics. Responsible for developing and coordinating an introductory computer science curriculum. Also gave lectures, recitations, and designed labs and exams. For more information on MEET, please see the website: http://meet.mit.edu MEET is an MIT-affiliated program that aims to teach Palestinian and Israeli teenagers computer science, giving them a common language and bridging the gap without using politics. Responsible for developing and coordinating an introductory computer science curriculum. Also gave lectures, recitations, and designed labs and exams. For more information on MEET, please see the website: http://meet.mit.edu



Mandiant (now part of Google Cloud)

• United States
• Computer and Network Security
• 700 & Above Employee

• Consulting and Software Engineering Intern

  • Jun 2007 - Jul 2007

  Wrote utilities to aid in penetration testing and malware analysis. Also responsible for cryptanalysis and working with corporations to harden their security. Involved in data forensics and safe retrieval of data as well. Wrote utilities to aid in penetration testing and malware analysis. Also responsible for cryptanalysis and working with corporations to harden their security. Involved in data forensics and safe retrieval of data as well.



KBC Bank & Verzekering

• Belgium
• Financial Services
• 700 & Above Employee

• Systems Intern

  • Jun 2006 - Aug 2006

  Responsible for upkeep of backend systems including UNIX, Solaris, and Windows Server machines. Was also responsible for handling front-line support and scripting. Responsible for upkeep of backend systems including UNIX, Solaris, and Windows Server machines. Was also responsible for handling front-line support and scripting.



Morgan Stanley

• United States
• Financial Services
• 700 & Above Employee

• IT Intern

  • Jul 2005 - Aug 2005

  Developed a web-based frontend (in JSP) and a Java-based backend for managing entitlements to accounts, trades, and contacts for users around the world. Developed a web-based frontend (in JSP) and a Java-based backend for managing entitlements to accounts, trades, and contacts for users around the world.



Morgan Stanley

• United States
• Financial Services
• 700 & Above Employee

• IT Intern

  • Jul 2004 - Aug 2004

  Responsible for the redevelopment of an administration tool as a web application using Java for the backend and JSP for the frontend. This tool was the sole frontend for administering GenericQuery, a proprietary concept written to generate dynamic SQL “on-the-fly” utilizing metadata. Also involved in “HiBridge,” or Hierarchical Bridging. This later became my Intel ISEF project, for which I was a finalist. Responsible for the redevelopment of an administration tool as a web application using Java for the backend and JSP for the frontend. This tool was the sole frontend for administering GenericQuery, a proprietary concept written to generate dynamic SQL “on-the-fly” utilizing metadata. Also involved in “HiBridge,” or Hierarchical Bridging. This later became my Intel ISEF project, for which I was a finalist.