Work history

Three years running security assessments at Apple, and building the AI and automation tooling around them. Before that, program management at Bitwise Industries.

Resume

Experience

  1. Apple Information Security Project Manager

    2023 to now
    • Built a RAG security advisor used daily by security teams and assessors. It handles hundreds of queries a week and replaced a dedicated on-call rotation.
    • Built MCP agent workflows for assessor scheduling and workload balancing. Cut vendor resource reporting from 1-2 days to under five minutes with Python.
    • Delivered 800+ security assessments, nearly 90% on time, across four firms, four regions, and 30+ assessors.
    • Raised capacity per assessor by at least 17% and met growing demand with 15% lower staffing.
    • Cleared hundreds of overdue assessments in annual two-month campaigns, and drove hundreds of aged pentest findings to closure.
    • Owned a multi-month ERP penetration test and platform migration review, from scoping through executive readouts.
    • Cut onboarding steps threefold for 10+ assessors, scopers, and PMs with standard templates and an ERP assessment guide.

  2. Bitwise Industries Program Manager

    2022 to 2023

    Contract lifecycle tracking in DocuSign CLM and program reporting in Smartsheet.

  3. Rishi Kumar for Congress Regional Manager

    2020 to 2021

    Ran a 48-person regional field team: daily field operations, standups, and voter outreach data.

  4. Apple Product Specialist

    2019 to 2020

    Mentored new team members and supported customer-facing sales, with consistently high NPS.

Education

UC Santa Barbara B.A., Global Studies

2022

Vice President, Indus Cultural Club. Secretary, Data Science Club. Society of Automotive Engineers.

What I'm good at

Program management
roadmaps · program operations · multi-vendor programs · scoping and estimation · dependency management · SLAs · KPIs · scope changes · on-time delivery · executive readouts · workflow design · cross-functional coordination
Capacity and vendors
capacity planning · forecasting · resourcing · assessor scheduling · workload balancing · staffing · vendor management · vendor reporting · global teams · backlog campaigns
AI and automation
AI agents · LLM workflows · MCP servers · RAG · evaluation sets · tool calling · agentic workflow design · on-device AI · AI-assisted reporting · Python automation · Gemini and GPT APIs
Security
security assessments · appsec assessments · third-party security testing · penetration testing · pentest scoping · vulnerability management · findings remediation · risk management · risk treatment · PCI-priority engagements · ERP security reviews · platform migration reviews
Shipping products
product discovery · technical roadmapping · API product management · developer tools · iOS apps · App Store launch · PWAs · public MCP servers
Technical
Python · SQL · TypeScript · Swift · SwiftUI · Foundation Models · Vision · APNs · Next.js · Cloudflare Workers · D1 · R2 · Supabase · Firebase · Zod · MapLibre · REST APIs · Vercel · AppleScript · OpenSCAD
Tools
Jira · Quip · Miro · Smartsheet · DocuSign CLM · Excel
Reporting and docs
executive reporting · templates · assessment guides · documentation · contract lifecycle · agreement workflows · task tracking
Leading people
team leadership · field operations · daily standups · mentoring · onboarding · stakeholder management · customer-facing communication · event coordination