Software Developer · Security & Identity
This is a collection of things I've built, problems I've worked through, and ideas I'm exploring.
About
I'm a software developer working in security at Solidigm. I build internal tools that help with identity and security operations. A lot of my work involves connecting systems and automating tasks that would otherwise take someone a lot of manual effort.
PhishFinder started with a security incident at work. I was seeing phishing attempts that didn’t fit the familiar examples people were trained to spot, and I wanted to help users make sense of them. For my computer science capstone at CSU Monterey Bay, I built a Gmail plugin that analyzed suspicious messages and explained the warning signs. It included a natural-language module designed to flag potentially AI-generated text in unfamiliar attacks, drawing on attempts we’d seen in the wild. The project won the Capstone Innovation Award.
Outside of work, I like visiting national parks and tinkering with home automation. Some of the projects here solve a problem I've run into; others started because I wanted to understand how something works.
I build tools to inspect model execution, ground documents in evidence, and bring security checks into daily development.
Learning & instrumentation
A learning project where I recorded part of a local model run and built a viewer for the tokens, vector magnitudes, routing weights, and output scores.
I added the capture hooks, wrote checks for the recorded data, and built the viewer.
Recorded investigation · Working viewer
Explore the projectDocument tooling & local models
A résumé and cover-letter workflow that proposes edits to selected text, checks the format, shows a diff, and builds a PDF for review.
I built the workflow around marked LaTeX sections, structured edit proposals, targeted checks, diff review, and PDF compilation.
Public legacy source · Private successor
Explore the projectOpen-source developer tooling
Local secret scanning and static analysis for solo builders, small teams, and people working with coding agents. It runs before code leaves the machine through a Git push.
I added parallel checks, normalized and deduplicated findings, and Git-hook integration around Gitleaks and Semgrep.
Open source · v0.1.2
Explore the projectI also build software for my own day-to-day workflows.
I built the SwiftUI client and integration backend, connecting home controls and camera history in one application.
I built the native capture and search app, separating permanent entry files from the temporary indexes that make them fast to find.
I built the capture and validation workflow, plus a read-only reader that searches a committed snapshot of the knowledge base.
These are personal projects. My work at Solidigm stays in private company repositories.
Solidigm
I build internal tools and integrations for identity security. My work includes automation for non-human identities and access patterns involving AI agents.
University of California
I built an internal application that brought security and endpoint data together for more than 7,000 devices. I also worked on vulnerability-remediation tools, software inventory, identity infrastructure, and security integrations.
Great Wolf Resorts
I wrote PowerShell and Python automation for Azure administration, user audits, and endpoint security tools including Carbon Black, BitLocker, and Citrix. I used Microsoft Graph and Active Directory to make user and distribution-list management easier, ran company-wide KnowBe4 phishing campaigns, and wrote Rapid7 InsightVM queries for threat detection.
Simple.biz
I built responsive websites in Duda CMS, handled SEO and front-end work, and worked with project managers and clients to solve technical issues.
Contact