I spent 22 years in law enforcement, most recently as a Detective Sergeant, before moving into technology. In my last role I was responsible for identity, endpoint and vulnerability management at a regulated financial services business. I'm still building my GRC knowledge, and I see it as the foundation for doing security work well. I also build software in Python and TypeScript, which helps me read code and understand how applications fail.