2020 - 2023, Emily Griffith Technical College Network Advisory Board
Certifications
CISSP (Certified Information Systems Security Professional)
ISO/IEC 27001:2022 Lead Implementer
CCNA (Cisco Certified Network Associate)
AWS Certified Cloud Practitioner
AIGP (AI Governance Professional), In Progress
Education
2020 - M.Sc., Human Resource Management Regis University
2011 - B.A., Political Science (Music Minor) Metropolitan State University of Denver
2025 - Leadership in the Digital Age Harvard Business Publishing
Cybersecurity & Information Security Leadership
Protecting Global Enterprises. Governing Risk. Leading with Strategic Vision.
Cybersecurity is no longer simply a technology discipline. It is a fundamental responsibility of enterprise leadership, demanding sound judgment, strategic foresight, operational discipline, and an unwavering commitment to protecting the organizations and people who depend upon us.
As a cybersecurity executive, I lead global information security initiatives at the intersection of enterprise risk, regulatory compliance, operational resilience, and business strategy. My work centers on developing security programs that move beyond compliance-driven obligations to establish measurable, sustainable security capabilities aligned with organizational objectives.
I oversee a comprehensive security portfolio encompassing enterprise risk management, security operations, threat detection and response, vulnerability and exposure management, cloud security, information protection, and third-party risk. I also lead the governance and assurance programs supporting internationally recognized standards and regulatory frameworks, including ISO 27001, PCI DSS, and SOC 2 Type II, while advancing organizational readiness for additional frameworks such as TISAX, HITRUST, and URAC.
My responsibilities extend beyond technical oversight. I direct the development of security personnel, manage security investments and operating budgets, establish enterprise policies and governance structures, and advise senior executives on security risks, technology decisions, and organizational priorities. From contractual risk assessments and strategic vendor evaluations to enterprise change governance, I work to ensure that security enables responsible business growth while protecting critical assets and stakeholder trust.
A defining focus of my leadership has been organizational transformation: identifying weaknesses in security maturity, establishing accountable processes, modernizing governance, and building the operational capabilities necessary to address an evolving threat landscape. This includes leading the modernization of enterprise security policies, strengthening risk ownership and exception management, and advancing cloud security capabilities.
I approach cybersecurity through the broader lens of institutional leadership. Effective security requires more than sophisticated technology. It demands informed decision-making, disciplined execution, responsible stewardship of resources, and the ability to align people, processes, and technology around a common mission.
My guiding principle is that cybersecurity must be measurable in its effectiveness, defensible in its decisions, and meaningful in its contribution to enterprise resilience and long-term business success.
Governance is what lets people adopt AI with confidence.
I believe AI is most valuable as a force multiplier for people. It lets one person accomplish what once required several, and it makes each person’s judgment worth more rather than less.
An organization that adopts AI deliberately can grow its output without shrinking its workforce. Each person does more, the business expands, and headcount can hold steady or even increase.
Governance and security are what make that outcome achievable. They give teams the assurance to move quickly, because the work is secure and lawful by design. I regard governance as the thing that frees people to use AI, not as a brake on it.
I come to this as a practitioner. My career is in governance, risk, and compliance (GRC): the discipline of ensuring an organization follows the rules, manages its risks, and can demonstrate both. I maintain ISO 27001, PCI DSS, and SOC 2 Type 2 certifications and attestations, which are independent audits that verify those standards are met.
I run risk management end to end, from assessment through treatment, and I lead and develop a security team. I am now applying that same discipline to AI.
Most recently, I wrote my organization’s enterprise AI Use Policy, which has been approved and put into practice. It sets clear rules for how people may use AI at work, so teams can adopt it with confidence instead of guessing where the lines are.
I am building the foundation of an AI risk assessment program, including AI Detection and Response (AIDR): the tools and processes for identifying threats and misuse in AI systems.
I am studying for the IAPP AI Governance Professional (AIGP) certification. The IAPP is the International Association of Privacy Professionals, and this credential signals a recognized professional standard for governing AI responsibly.
The certifications and attestations behind this work are listed under Leadership and Credentials, and the day-to-day security practice is described in Cybersecurity.
Choral & Orchestral Conducting
Artistic Vision. Musical Excellence. The Power of Ensemble.
Conductor | Choral Director | Music Educator | Vocal Performance
Great musical performances begin long before the first note is sung. They are the product of artistic vision, disciplined preparation, inspired musicianship, and a shared commitment to excellence.
My lifelong passion for music has been shaped by formal study in music education and vocal performance, extensive experience in choral and orchestral conducting, and the privilege of leading auditioned community ensembles. Throughout my musical journey, I have sought to cultivate more than technical proficiency. I strive to develop musicianship, inspire artistic expression, and create ensembles capable of delivering performances that resonate with both performers and audiences.
My leadership in music began early. As president of my high school choir council and recipient of the National School Choral Award, I established a new tradition in which the choir council president conducted the combined choirs at the Christmas concerts each year. That experience helped establish a philosophy that continues to inform my work as a conductor: musical excellence requires preparation, disciplined collaboration, mutual trust, and the ability to unite many individual voices around a singular artistic vision.
In the years since, I have had the opportunity to direct auditioned community choirs and orchestras, working with musicians of varying backgrounds and abilities to pursue ambitious repertoire, refine ensemble performance, and bring meaningful musical experiences to the communities they serve.
For me, conducting is the intersection of artistry and leadership. It is the responsibility of interpreting a composer's intentions, drawing excellence from every musician, and transforming individual contributions into something extraordinary.
Conducting and directing
2024 - 2025 - Calvary Castle Rock Choir - Founder and Director
Started the church's first choir and built it from the ground up over about eighteen months before handing it on.
2019 - 2021 - Castle Rock Chorale - Maestro
Two years leading an auditioned community choir at level 3 to 5 repertoire, with performances at community events, nursing homes, and holiday carol ceremonies.
An orchestral role held while studying at Metropolitan State University of Denver.
2008 - 2009 - Corona Presbyterian Church Choir - Director of Music and Worship
2003 - 2005 - GracePoint Community Church - Director of Music Ministries
About three years leading the music program.
As a singer
2026 - Tenor, Kirksville Community Chorus
2023 - 2025 - Tenor, Alpine Chorale
2017 - 2019 - Tenor, Castle Rock Chorale
2005 - 2009 - Tenor Section Leader, Metropolitan State University of Denver Chorale
2005 - 2009 - Tenor Section Leader, Metropolitan State University of Denver Men's Chorus
2007 - 2008 - Tenor, St. Mary Catholic Parish Choir
2002 - 2003 - Tenor, Colorado Christian University Choir
2002 - 2003 - Tenor, Colorado Christian University Vocal Chamber Ensemble
1998 - 2001 - Tenor, Colorado Mormon Chorale
1998 - Tenor, Colorado All-State Choir
1995 - 1997 - Tenor, Jefferson County Colorado All County Choir
Public Service & Government Leadership
A Career Defined by Service. A Commitment to Principled Leadership.
Law Enforcement | Government Affairs | Legislative Engagement | Political Strategy | Public Policy
Since 2011, I have dedicated a significant part of my professional life to serving the public, strengthening institutions, and advancing the principles of accountable government.
My experience spans the front lines of law enforcement, the complexities of local and state government, legislative affairs, and the strategic leadership of political campaigns. These roles have provided me with a perspective that few professional paths can offer: an understanding of how public policy is developed, how government decisions affect communities, and what it takes to lead when the consequences of those decisions are real.
Throughout my career, I have worked alongside public officials, community leaders, and citizens to address complex challenges, advocate for responsible governance, and build public trust. Whether navigating matters of public safety, shaping political strategy, or engaging in policy discussions, my approach has remained grounded in constitutional principles, personal accountability, ethical leadership, and the conviction that government exists to serve the people.
Today, I bring that same perspective to executive leadership in cybersecurity, technology, and artificial intelligence governance, where questions of institutional responsibility, public trust, risk, and individual rights are increasingly consequential.
My philosophy is straightforward: Leadership is measured by the integrity of one's decisions, the courage to accept responsibility, and the lasting value of one's service to others.
Legislature
2024 - Present: Senior Legislative Aide, Colorado House of Representatives
Office of Representative Max Brooks, House District 45 serving Castle Rock, CO
2024: Senior Legislative Aide, Colorado State Senate
Office of Senator John Carson, Senate District 30 serving Highlands Ranch, CO
2013 - 2015: Policy Advisor, Colorado House of Representatives
Office of Representative Jovan Melton, House District 41 serving Aurora, CO
Campaigns and Elections
2023 - 2024: Campaign Manager, Joe Andujo for United States House of Representatives, CD8
2023 - 2024: Campaign Manager, Mark Davis for Castle Rock Town Council, District 4
2023 - 2024: Political Consultant, Laura Cavey for Castle Rock Town Council, District 2
2020 - 2022: Campaign Manager, Greg Lopez for Governor of Colorado
2010: Deputy Treasurer, Dan Maes for Colorado Governor
2009 - 2010: Candidate, Colorado House of Representatives, District 9
Local Government
2026 - Present: City of Greentop Fire Department - Greentop, MO
Board of Directors
2022 - 2026: Douglas County Planning Commission - Castle Rock, CO
Chairman
2021 - 2023: Cobblestone Ranch Homeowners Association - Castle Rock, CO
Board of Directors Chairman, Public Safety Committee
2017 - 2023: Town of Castle Rock Election Commission - Castle Rock, CO
Chairman
2011 - 2013: City of Littleton Victim Compensation Board - Littleton, CO
Board of Directors
Law Enforcement and Public Safety
2024 - 2025: Community Safety Volunteer, Douglas County Sheriff's Office
2015 - 2019: Reserve Deputy Marshal, Hugo Marshal's Office
2013 - 2014: Deputy Sheriff, Lincoln County Sheriff's Office
2006 - 2012: Police Officer, Manitou Springs Police Department
2004 - 2005: Police Officer, Red Rocks Community College
I welcome conversations with executives, board members, business leaders, and organizations seeking experienced leadership in cybersecurity, artificial intelligence governance, enterprise risk, and organizational transformation.
Whether exploring executive leadership opportunities, board and advisory appointments, strategic partnerships, or speaking engagements, I value opportunities to exchange ideas, address complex challenges, and contribute to meaningful outcomes.
Significant gaps in enterprise asset visibility had created systemic security and operational risks. Approximately 28% of the technology environment consisted of assets operating outside established IT governance and inventory controls.
These unmanaged assets introduced potential security exposures involving endpoint protection, configuration hardening, identity and access management, vulnerability assessment, and compliance oversight. The absence of authoritative asset records also complicated incident response, risk assessment, and enterprise security governance.
Spearheaded an 18-month enterprise asset discovery and governance transformation initiative, leading technology evaluation, vendor selection, procurement, implementation, and operational integration of the Apexa iQ platform.
Architected and progressively optimized an enterprise-wide discovery capability, integrating multiple asset intelligence sources to identify unmanaged infrastructure, reconcile inventory discrepancies, and improve visibility across the technology ecosystem.
Established a systematic approach to identifying shadow IT and supporting its transition into established asset governance processes. Coordinated the operational handoff to enterprise Configuration Management Database (CMDB) and ServiceNow administrators, transitioning the capability from an independently developed security initiative into an established IT asset management function.
Business Impact | Quantifiable Risk Reduction
86% Reduction in Shadow IT Exposure
Reduced shadow IT prevalence from 28% to 4% of the environment, substantially improving enterprise asset visibility, security oversight, and governance accountability.
Established a sustainable asset discovery and governance capability with designated operational ownership, enabling continued monitoring and management beyond the initial transformation initiative.
Executive & Technical Competencies
Enterprise Security Transformation | IT Asset Discovery | Attack Surface Visibility | Shadow IT Risk Management | Technology Architecture | Vendor Evaluation & Procurement | Systems Integration | CMDB & ServiceNow | IT Governance | Cross-Functional Program Leadership
A large enterprise faced significant security monitoring deficiencies stemming from a poorly configured and operationally unreliable Security Information and Event Management (SIEM) platform.
Incomplete log ingestion, unidentified network assets, and ineffective detection configurations created substantial gaps in threat visibility, incident detection, and security event correlation. These deficiencies also presented a critical obstacle to achieving Federal Risk and Authorization Management Program (FedRAMP) authorization readiness, placing the organization’s ability to pursue federal contracting opportunities at risk.
Led a comprehensive remediation and modernization initiative involving IBM QRadar, focusing on enterprise log coverage, detection engineering, and operational reliability.
Leveraged Nmap network discovery and asset enumeration to identify previously unmonitored systems across an infrastructure exceeding 6,500 devices. Directed the systematic onboarding of critical assets into QRadar, expanding security telemetry collection and establishing more comprehensive monitoring across the enterprise.
Engineered improvements to security event processing through Device Support Module (DSM) optimization, log parsing refinement, and detection rule tuning. These efforts strengthened event normalization, improved alert fidelity, and reduced unnecessary security alerts caused by misconfigured detection logic.
Aligned technical remediation priorities with federal security requirements, strengthening the organization’s security monitoring capabilities and addressing deficiencies affecting FedRAMP authorization readiness.
Business Impact | Enterprise Security & Regulatory Enablement
98%+ Critical Asset Logging Coverage
Achieved greater than 98% logging coverage across critical devices within an enterprise environment of more than 6,500 assets.
Improved threat detection reliability, reduced false-positive alerting, and restored confidence in the organization’s centralized security monitoring capabilities.
Remediated significant security monitoring deficiencies that had obstructed FedRAMP readiness, strengthening the organization’s ability to pursue federal authorization and government contracting opportunities.
An enterprise-wide initiative required the replacement of an existing McAfee endpoint security solution with Cisco Advanced Malware Protection (AMP), now known as Cisco Secure Endpoint.
The transition required more than deploying replacement security software. Successful implementation depended on establishing the supporting infrastructure, developing standardized endpoint security policies, and implementing the governance and operational procedures necessary for consistent, sustainable administration.
The initiative presented an opportunity to modernize endpoint protection capabilities while strengthening security configuration standards, administrative consistency, and operational accountability.
Played a key technical and governance role in the enterprise migration from McAfee to Cisco AMP, contributing to the establishment and configuration of the infrastructure supporting the new endpoint protection platform.
Developed the platform’s endpoint policy architecture and standardized naming conventions, establishing a structured approach to organizing endpoint groups, managing security configurations, and maintaining administrative consistency.
Authored the comprehensive governance framework and operational procedures supporting the platform’s administration, establishing documented standards for security policy management, configuration control, and ongoing operational oversight.
These contributions helped transition the implementation from a technology deployment into a formally governed enterprise security capability.
Business Impact | Operational Standardization & Security Governance
Successful Enterprise Endpoint Security Migration
Contributed to the successful migration from McAfee to Cisco AMP, establishing a modernized endpoint protection environment supported by standardized policies and documented operating procedures.
Developed a structured policy and configuration management framework to improve administrative consistency, strengthen security governance, and support ongoing platform management.
Established the procedural foundation necessary for sustainable endpoint security operations, reducing reliance on undocumented administrative practices and supporting long-term operational continuity.
A global enterprise faced significant deficiencies in its security awareness and workforce compliance program, with historical training completion rates below 25%.
The absence of consistent training enforcement, centralized compliance visibility, and reliable completion tracking created substantial organizational risk. These deficiencies threatened Payment Card Industry Data Security Standard (PCI DSS) compliance and jeopardized the organization’s ability to satisfy HITRUST assessment requirements.
Addressing the exposure required more than improving employee participation. It demanded an enterprise-wide transformation of security awareness governance, executive accountability, workforce engagement, and compliance reporting.
Spearheaded the modernization of the enterprise security awareness program, securing executive sponsorship and coordinating stakeholders across Information Security, Human Resources, and Corporate Communications.
Implemented a comprehensive security awareness training platform, establishing structured content delivery and standardized training requirements.
Developed compliance tracking and management reporting capabilities through integrations with Workday and Apache Superset, improving visibility into employee participation, completion status, and outstanding training obligations.
Partnered with Human Resources to institutionalize security awareness training within the employee lifecycle, establishing mandatory completion within 30 days of hire and recurring annual training requirements across the workforce.
These initiatives transformed security awareness from an inconsistently administered activity into a structured, measurable, and sustainable enterprise governance program.
Business Impact | Compliance Recovery & Workforce Accountability
100% PCI Training Compliance
Increased security awareness training completion from below 25% historically to 100% among employees within the PCI compliance scope, representing an improvement of more than 75 percentage points.
Successfully addressed security awareness requirements evaluated during HITRUST assessment sampling, supporting a favorable assessment outcome for the applicable controls.
Established a sustainable compliance monitoring and accountability framework through centralized reporting, standardized training requirements, and integration with employee onboarding processes.
Strengthened organizational security governance by embedding awareness training into established workforce procedures rather than relying on periodic, manually coordinated compliance campaigns.
Critical Infrastructure Performance Recovery & Root Cause Analysis
Situation | Widespread Authentication Degradation
An organization operating across two geographically separate offices experienced a severe degradation in Windows Active Directory authentication performance, with user login times increasing to between three and five minutes.
The disruption followed an externally deployed ESET endpoint security update that had bypassed established change management procedures, making the software deployment the primary suspected cause.
With approximately 35 personnel affected, the organization faced reduced operational productivity and an unresolved infrastructure performance issue requiring systematic investigation.
Technical Leadership | Advanced Diagnostics & Root Cause Isolation
Independently conducted a comprehensive, two-day technical investigation to identify the underlying cause of the authentication delays.
Initially examined the recent ESET deployment, systematically testing and eliminating the antivirus update as the source of the degradation.
Extended the investigation across the Active Directory authentication workflow, examining infrastructure dependencies and isolating the specific phase of the login process responsible for the extended response times.
Traced the performance degradation to file server operations and identified an external storage device that was adversely affecting access to network shares required during user authentication.
This evidence-based diagnostic process revealed an infrastructure bottleneck unrelated to the initially suspected security software deployment.
Business Impact | Service Restoration & Operational Resilience
Authentication Performance Restored
Identified the underlying infrastructure fault responsible for three-to-five-minute login delays affecting personnel across two office locations.
Following remediation of the external storage issue, authentication performance returned to normal operating conditions, restoring workforce productivity and system usability.
The investigation also demonstrated the operational importance of disciplined change management, accurate technical documentation, and evidence-based root cause analysis.
By distinguishing correlation from causation, the investigation prevented the organization from pursuing an incorrect remediation path and established a clear understanding of the actual infrastructure failure.
Executive & Technical Competencies
Infrastructure Troubleshooting | Root Cause Analysis | Active Directory | Windows Authentication | File Server Performance | Storage Infrastructure Diagnostics | Endpoint Security | ESET | Technical Incident Investigation | IT Service Restoration | Change Management Governance | Operational Resilience
Case study 06
Advanced Cybersecurity Research & Infrastructure Engineering
Objective | Independent Technology Research & Innovation
Architected and independently developed a multipurpose technology infrastructure integrating cybersecurity research, enterprise-style networking, virtualization, artificial intelligence experimentation, software development, and production application hosting.
The environment serves as a dedicated platform for evaluating emerging technologies, conducting controlled security experimentation, developing technical solutions, and maintaining advanced engineering proficiency alongside executive cybersecurity leadership responsibilities.
Designed and deployed a Proxmox virtualization environment powered by dual Intel Xeon processors, 32 logical CPUs, and approximately 96 GiB of memory, supporting multiple virtualized workloads spanning cybersecurity research, application hosting, AI development, and automation.
Engineered a centrally managed Ubiquiti UniFi network incorporating 10 GbE-capable switching, Wi-Fi 7 access points, and purpose-defined VLANs separating infrastructure, household systems, IoT devices, work and laboratory resources, guest access, and AI experimentation.
Implemented a policy-governed network security architecture incorporating firewall-based traffic controls, network isolation policies, stateful connection handling, and restrictions on unauthorized and invalid traffic. The UniFi environment maintains a comprehensive firewall policy set, providing granular control over network communications.
Integrated centralized security telemetry and application-aware traffic analytics to monitor network flows, identify communication patterns, classify security-relevant activity, and investigate anomalous connections.
Developed a controlled cybersecurity research environment with virtualized attacker and target systems, supporting offensive and defensive experimentation, vulnerability testing, and security technology evaluation.
Extended the infrastructure to support production web hosting, independently developed applications, and technology services for external organizations, while maintaining separate environments for research, automation, and emerging AI technologies.
Established a multipurpose technical environment combining virtualized computing, high-speed networking, network segmentation, security policy enforcement, traffic monitoring, and cybersecurity experimentation.
Implemented logical network segmentation and a centrally administered firewall policy framework to support differentiated security requirements across operational, experimental, and connected-device environments.
Established granular traffic visibility, across more than 150,000 observed network flows.
Created a sustainable platform for technical research, application development, security testing, and operational service delivery, reinforcing executive cybersecurity decision-making through direct engineering experience.
Secure Agentic AI Engineering & Operational Integration
Objective | Advancing AI from Assistance to Operational Capability
Established an independent artificial intelligence engineering initiative to explore the transition of generative AI from conversational assistance into secure, integrated, and operationally capable technology systems.
The initiative focuses on a critical challenge in enterprise AI adoption: enabling AI systems to interact with real infrastructure, execute authorized operations, develop software, and support business processes while maintaining appropriate security boundaries, human oversight, and verifiable outcomes.
Rather than evaluating AI exclusively through conventional chat interfaces, I developed practical implementations that examine how agentic AI can operate within established cybersecurity, governance, and software engineering disciplines.
Designed and implemented AI-to-infrastructure integrations utilizing Model Context Protocol (MCP), enabling AI assistants to interact with operational systems through defined tools and controlled interfaces.
Integrated MCP capabilities with my Proxmox virtualization environment and Ubiquiti UniFi infrastructure, extending AI functionality into infrastructure administration and technical operations.
Implemented restricted service identities and scoped API credentials for infrastructure access, avoiding unrestricted administrative authentication and applying least-privilege principles to AI-enabled interactions.
Developed agentic software engineering workflows incorporating Git-based version control, feature branches, restricted deployment credentials, and human-directed verification. These processes provide structured controls around AI-generated code and application deployment.
Applied verification-driven development to software projects, including a municipal code publication system that validates source-to-output accuracy before publication. This approach establishes an explicit integrity check between authoritative source material and AI-assisted processing.
Additionally, developed a healthcare billing application prototype incorporating role-based access controls, account lockout mechanisms, and audit logging. Established documented validation requirements before permitting use with actual patient information.
These initiatives demonstrate the practical application of secure architecture, software engineering governance, and AI-assisted development across infrastructure administration, government information systems, and healthcare technology concepts.
Technical Impact | Secure AI Enablement & Engineering Innovation
Operational AI Integrations with Security and Verification Controls
Established functioning AI integrations capable of interacting with infrastructure management systems through standardized tool interfaces and constrained authentication mechanisms.
Developed repeatable AI-assisted software engineering practices incorporating version control, restricted deployment access, and verification requirements.
Implemented application-level security and integrity controls across experimental software systems, including role-based authorization, activity auditing, and source validation.
Created a practical foundation for evaluating agentic AI capabilities, identifying operational risks, and developing governance approaches informed by direct engineering experience.
The resulting environment supports continued experimentation with AI-driven automation while maintaining an explicit distinction between model-generated output, authorized system actions, and independently verified results.
Executive & Technical Competencies
Agentic AI Architecture | Model Context Protocol (MCP) | AI Systems Integration | Secure AI Infrastructure | Least-Privilege Access | API Security | Proxmox VE | Ubiquiti UniFi | AI-Assisted Software Engineering | Python | Flask | Git | Cloudflare Tunnel | Role-Based Access Control | Audit Logging | Software Verification | AI Governance | Human-in-the-Loop Controls
Case study 08
Enterprise AI SOC Transformation & Autonomous Security Operations
Situation | Traditional SOC Limitations & Operational Inefficiencies
A global enterprise faced the inherent limitations of traditional Security Operations Center (SOC) operations, where manual alert triage, fragmented threat intelligence, and labor-intensive investigations constrained detection speed, analyst productivity, and overall security effectiveness.
Tier 1 analysts were responsible for processing substantial volumes of security alerts and indicators of compromise (IoCs), often requiring manual correlation, contextual enrichment, and escalation to more experienced investigators.
These operational dependencies increased Mean Time to Detect (MTTD) and Mean Time to Investigate (MTTI), constrained investigative throughput, and limited the organization’s ability to scale security operations efficiently.
The challenge required more than conventional SOC tuning. It presented an opportunity to fundamentally transform the security operating model through artificial intelligence.
Strategic Leadership | AI Strategy, Technology Evaluation & Enterprise Deployment
Spearheaded the end-to-end evaluation, acquisition, implementation, and operationalization of an AI-powered Security Operations Center capability within a global enterprise.
Conducted market research and technical assessments to identify AI-enabled security operations technologies capable of improving threat detection, automating investigative workflows, enriching security telemetry, and accelerating incident analysis.
Designed and executed a proof of concept to validate technical capabilities, operational feasibility, and business value before advancing procurement and enterprise implementation.
Led technology procurement, deployment, integration, and operational adoption, embedding AI-assisted investigation and threat analysis capabilities into established SOC workflows.
Transformed analyst effectiveness by equipping Tier 1 personnel with AI-driven investigative capabilities traditionally associated with Tier 2 operations, including accelerated alert analysis, contextual correlation, IoC enrichment, and investigation support.
This transformation substantially expanded investigative capacity without requiring a proportional increase in security staffing, enabling analysts to process more alerts, investigate more indicators, and reach defensible conclusions more efficiently.
Business Impact | Accelerated Detection & AI-Augmented Workforce Transformation
Over 80% Reduction in Mean Time to Detect
Reduced MTTD from more than 15 minutes to less than three minutes, dramatically accelerating threat identification and security event visibility.
Accelerated Threat Investigation & Resolution
Reduced MTTI through AI-assisted alert triage, contextual enrichment, and investigative analysis, enabling faster case assessment, decision-making, and investigation closure.
Tier 1 to Tier 2-Equivalent Capability Advancement
Elevated the investigative capabilities of Tier 1 analysts through AI augmentation, enabling more advanced threat analysis and substantially increasing the volume and complexity of investigations they could manage.
Increased SOC Capacity & Operational Efficiency
Expanded security investigation throughput, reduced manual analytical workload, and improved the ability to investigate indicators of compromise at scale without proportional staffing increases.
Improved Alert Fidelity & Analyst Focus
Reduced false-positive investigation burden, allowing analysts to focus more attention on credible threats and higher-risk security events.
Enter your email address and I will send you a copy of my professional résumé.
Request received
I will send my résumé to personally.
Terms of Use
Last updated October 28, 2026
Welcome to garbo.cloud (the “Site”), the personal and professional website of C. J. Garbo. By using the Site, you agree to these Terms of Use. If you do not agree with them, please do not use the Site. Please also read the , which explains how information is handled.
1. What this Site is
The Site shares my professional background, credentials, experience, and perspective. It is provided for general information. Visiting the Site, sending me a message, or requesting my résumé does not create an employment, consulting, advisory, or any other professional relationship, and it is not an offer of services.
2. My own views, not an official voice
Everything on the Site reflects my personal views and professional experience. It does not represent the views, positions, or communications of any current or former employer, client, government office, elected official, board, commission, or other organization with which I am or have been associated. Nothing on the Site is an official statement of any government body, and the Site is not a government website.
3. Accuracy of information
I work to keep the Site accurate and honest. Titles, dates, and descriptions of my roles are given in good faith, and credentials and certifications can be renewed, expire, or change status over time. You are welcome to verify any credential with the organization that issued it. I may correct or update the Site at any time without notice, and if you notice a mistake, I would appreciate hearing about it.
4. Visual Content and Artificial Intelligence
Professional integrity, authenticity, and transparency are principles I take seriously, including in how my career and accomplishments are presented on this website.
To complement the documented record of my professional experience, some visual elements throughout this site have been created or enhanced using generative artificial intelligence. These illustrations serve to communicate the breadth of my work, leadership, and expertise in a compelling visual format, particularly where historical photographs or other visual materials are unavailable.
The use of AI-generated imagery does not alter, substitute for, or diminish the professional qualifications, leadership responsibilities, achievements, or experiences described on this site. Those representations stand independently of the accompanying imagery and reflect my actual professional background.
AI-generated illustrations are intended as conceptual or representative visuals, not as photographic documentation of specific events, individuals, or circumstances. Where authenticity or historical accuracy is relevant, the distinction between illustrative content and actual photography remains important.
I welcome reasonable inquiries regarding my professional credentials, experience, or the nature of visual content presented on this website. My commitment is to communicate my background accurately while embracing the responsible and innovative use of emerging technologies, as well as my abilities to utilize them.
You may view the Site, print pages for your own personal and non-commercial use, and quote brief excerpts with clear attribution and a link to the Site. Beyond that, you may not copy, reproduce, republish, distribute, modify, create derivative works from, or sell Site content without my prior written permission. You may not scrape or harvest the Site in bulk, or use its content to train machine learning or artificial intelligence models, without my prior written permission. Ordinary indexing by search engines is welcome.
Names, logos, and badges of certifications, schools, and organizations shown on the Site, such as those of ISC2, Cisco, and CompTIA, are trademarks or property of their respective owners. They appear only to identify credentials I hold or have held, and their use does not suggest any affiliation with, or endorsement by, those owners. Rights in any third-party material remain with their owners.
6. Acceptable use and security
Please use the Site lawfully and considerately. You agree not to:
Attempt to gain unauthorized access to the Site, its servers, or any connected system;
Scan, probe, or test the Site for vulnerabilities, or run penetration, stress, or load tests, without my prior written permission;
Introduce malicious code, or interfere with or overload the Site or its services;
Misuse or automate the résumé request form or any other feature, including bulk submissions, or submit an email address that is not yours or that you are not authorized to use;
Use the Site to harass anyone, to break the law, or to misrepresent who you are; or
Suggest that I endorse you, your products, or your services.
If you believe you have found a security issue, I welcome a good-faith report sent privately to [email protected] with enough detail to reproduce it. Please allow me reasonable time to respond before sharing it publicly, and please avoid accessing, changing, or keeping data that is not yours.
7. Résumé requests and contacting me
My résumé is shared at my discretion. I reply to requests personally, so a response may take time, and I may decline a request or not respond. By submitting an email address, you confirm that it is yours or that you are authorized to use it.
Contacting me by email, phone, or text does not create a confidential, professional, or advisory relationship. Please do not send passwords, account numbers, or other sensitive or confidential information in a first message. Unsolicited sales and marketing messages may go unanswered.
8. No professional advice
Anything on the Site about cybersecurity, artificial intelligence governance, risk, compliance, or public policy is general information and personal perspective. It is not legal, regulatory, security, compliance, financial, or other professional advice, and you should not rely on it for your own situation. Laws, standards, and threats change quickly. Please consult a qualified professional who knows your circumstances.
9. Links to other sites
The Site may link to websites that I do not own or control. I am not responsible for their content or practices, and a link is not an endorsement. You use them at your own risk and under their own terms.
10. Disclaimer of warranties
The Site is provided “as is” and “as available.” To the fullest extent permitted by law, I disclaim all warranties, express or implied, including warranties of merchantability, fitness for a particular purpose, and non-infringement, and I do not promise that the Site will be uninterrupted, secure, or free of errors.
11. Limitation of liability
To the fullest extent permitted by law, I am not liable for any indirect, incidental, special, consequential, or punitive damages, or for any loss of profits, data, or opportunity, arising from your use of the Site, your inability to use it, or your reliance on its content. My total liability for any claim relating to the Site will not exceed one hundred US dollars ($100). Some places do not allow certain limitations, so parts of this section may not apply to you.
12. Your responsibility
You are responsible for your own use of the Site. You agree to hold me harmless from claims, losses, and costs arising from your violation of these Terms or your unlawful use of the Site.
13. Changes and access
I may update these Terms from time to time. The date at the top shows when they last changed, and continuing to use the Site after a change means you accept the updated Terms. I may limit or end access to the Site for anyone who violates them.
14. Governing law
These Terms are governed by the laws of the State of Missouri, United States, without regard to its conflict-of-laws rules. Any dispute relating to the Site will be brought in the state or federal courts located in Missouri, and you consent to their jurisdiction.
15. General
If any part of these Terms is found unenforceable, the rest remains in effect. My not enforcing a provision is not a waiver of it. These Terms and the Privacy Policy are the whole agreement between you and me about the Site.
Your privacy matters to me. This policy explains what information garbo.cloud (the “Site”) collects, how it is used, and the choices you have. The short version: I collect very little, I never sell it, and I use it only to run the Site and to respond to you. This policy works together with the .
1. Information I collect
Information you give me. If you request my résumé, you enter your email address in the request form. It reaches me as a message in my email inbox, and I use it only to send you my résumé personally. If you contact me by email, phone, or text, I receive whatever you choose to share, such as your name, contact details, and the content of your message. I use your phone number or email address only to respond to you. Your mobile carrier may charge you for calls and messages under your own plan.
Technical information. Like any website, the systems that deliver this Site process standard technical information, such as your IP address, browser type, device type, the pages requested, and the date and time. This is handled by my hosting and network provider, Cloudflare, so that the Site can be delivered and protected against attacks and abuse.
Abuse protection. To keep the résumé form from being flooded, the service behind it briefly counts requests by IP address and by email address. It does this with scrambled (hashed) values that cannot be turned back into the original, held only in the server’s memory. They are never written to disk, they are cleared whenever the service restarts, and they are used for nothing else. The form also uses a hidden field and a timing check to tell people from automated programs, and nothing from those checks is kept. The service does not record your email address in its logs.
2. Cookies and tracking
The Site does not use advertising cookies, tracking pixels, or third-party advertising trackers, and I do not build profiles of visitors. The fonts and scripts the Site uses are hosted on the Site itself rather than loaded from other companies, and the Site does not store anything in your browser. The Site does use Cloudflare Web Analytics, a privacy-focused measurement service, to understand overall traffic, such as page views, referring sites, countries, and loading performance. Cloudflare states that this service does not use cookies or similar browser storage and does not fingerprint individual visitors. I review only the combined results. Cloudflare may also use strictly necessary security cookies or tokens to protect the Site, under its own policy.
3. How I use information
To respond to you and to send my résumé when you ask for it;
To operate, secure, and maintain the Site, and to prevent abuse; and
To meet legal obligations or protect rights and safety when necessary.
I do not sell, rent, or trade your personal information, I do not use it for advertising, and I will not add you to a mailing list because you contacted me or asked for my résumé.
4. Who else handles information
I use service providers to run the Site and to communicate with you, and your information passes through them only as needed for those purposes. They include my hosting and network provider (Cloudflare), my email provider (Google), and my telephone and text messaging provider (Google Voice). Each handles information under its own privacy policy, for example Cloudflare’s and Google’s. I may also disclose information if the law requires it or to protect the rights, property, or safety of others. I do not share your information with anyone else.
5. How long I keep it
The Site’s service does not keep your email address after it has been delivered to me. A request or message in my inbox stays there for as long as I need it to reply and to keep ordinary professional correspondence, and I will delete it if you ask. Information held by Cloudflare and other providers is kept under their own policies.
6. Security
The Site uses encrypted connections (HTTPS), collects as little information as it can, and keeps its limits in memory rather than on disk. No method of transmission or storage is perfectly secure, and ordinary email is not end-to-end encrypted, so please do not send passwords, account numbers, or other highly sensitive information to me by email, text, or the form.
7. Your choices and rights
You may ask me what information I hold about you, ask me to correct it, or ask me to delete it, and you may ask me to stop contacting you. Write to [email protected] and I will respond within a reasonable time, normally within 30 days. Depending on where you live, laws such as those in California, Colorado, and the European Union and United Kingdom may give you specific rights, and I am glad to honor them. Because I do not sell personal information or track visitors across other sites, there is nothing to opt out of, and the Site treats every visitor the same, including those who send a Do Not Track or Global Privacy Control signal.
The Site is operated from the United States, so information you send is processed there. If you are in another country, you understand that your information will be transferred to and handled in the United States.
8. Children
The Site is meant for adults and professional audiences. It is not directed to children, and I do not knowingly collect information from anyone under 16. If you believe a child has sent me information, please tell me and I will delete it.
9. Links to other sites
The Site may link to other websites. They have their own privacy practices, which I do not control, so please read their policies.
10. Changes to this policy
I may update this policy as the Site changes. The date at the top shows when it was last revised, and I will make any significant change clear on the Site.
11. Contact
Questions or requests about privacy are welcome at [email protected].
