Curriculum Vitae
Security engineering in industry, grounded in a decade of security and privacy research.
Professional Experience
Security Engineer II, AI & AGI Security
Jul 2026 – Present Amazon · Seattle, WA
Securing the foundation models developed by Amazon's AGI organization, extending protection from the application and AI-agent layers down to the models themselves.
Security Engineer II, Amazon Healthcare Security
Feb 2025 – Jul 2026 Amazon · Seattle, WA
Principal engineer for a large-scale insider-threat (data-misuse) detection capability for regulated healthcare data: built an offline simulation framework that validates detections against historical access patterns before deployment, role-aware suppression that cut projected investigative workload by an order of magnitude, and cross-system identity resolution. Lead security architect and threat-model author for an AI-agent integration layer built on the Model Context Protocol (MCP), covering indirect prompt injection, agent tool abuse, and data exfiltration. Built LLM-assisted security review tooling and designed the organization's automated security issue-management program.
Privacy Engineer, Privacy Incident Response Engineering
Oct 2022 – Jan 2025 Meta · Seattle, WA
Privacy Incident Manager on-call for high-severity events (external attacks, insider threats, full-stack incidents) affecting systems that serve tens of millions of users. Led 50+ in-depth post-incident reviews, applied variant analysis to find similar undiscovered vulnerabilities (including several zero-days), and identified 150+ critical remediation actions, turned into production detections and preventive controls. Authored the team's variant-analysis runbook and user-report analysis guide.
Privacy Incident Investigation Engineer (Intern)
Jun 2021 – Sep 2021 Facebook · Remote
Built a system that surfaces related incidents by similarity of root cause, vulnerability vector, and exploitation surface; used side-channel data to tighten estimates of incident impact.
Graduate Researcher, DARPA Brandeis TIPPERS Project
Sep 2016 – Oct 2022 University of California, Irvine
Security and privacy research advised by Prof. Nalini Venkatasubramanian. Co-developed the TIPPERS privacy-preserving IoT platform, deployed on the UC Irvine campus and tested in the U.S. Navy's Trident Warrior 2019 and 2020 exercises. Designed Wi-Fi/BLE packet-analysis and anomaly-detection pipelines at 2,000+ access-point scale and cryptographic attestation mechanisms for smart spaces. Also contributed to CareDEX, an NSF-funded disaster-resilience data exchange for senior-care communities.
Research Intern
Summer 2017 NEC Laboratories America · Princeton, NJ
Designed and built an end-to-end IoT parking-occupancy monitoring system (BLE beacons, LoRa, edge devices) from concept to working deployment.
Education
Ph.D. Candidate (ABD), Networked Systems
2016 – 2022 University of California, Irvine
Distributed Systems Middleware group. Advisor: Prof. Nalini Venkatasubramanian.
M.S., Networked Systems
2013 – 2016 University of California, Irvine
B.E., Information Security
2008 – 2012 Wuhan University
Professional Service
- Program Committee Member, IEEE HealthSec 2026, Workshop on Cybersecurity in Healthcare (co-located with ACSAC), 2026.
- Committer, Linux Foundation LF Edge / Akraino, Integrated Edge Cloud (IEC) Type 4 AR/VR Blueprint, 2019–2020.
- Contributor, OWASP GenAI Security Project, 2026–present.
Honors and Awards
- Best Paper Award, IEEE International Symposium on Network Computing and Applications (NCA), 2019, for IoT Notary: Sensor Data Attestation in Smart Environment.
- 1st Place, Linux Foundation LF Edge Akraino 5G Multi-Access Edge Computing (MEC) Hackathon, KubeCon, San Diego, 2019.
- 1st Place, US Ignite / Extreme Networks SDN Innovation Challenge, Washington, D.C., 2015.
Research Programs
- TIPPERS (Testbed for IoT-based Privacy-Preserving PERvasive Spaces), DARPA Brandeis program. Graduate researcher and platform co-developer. Deployed on the UC Irvine campus and tested in the U.S. Navy’s Trident Warrior 2019 and 2020 exercises.
- CareDEX, NSF Civic Innovation Challenge. Contributor to a disaster-resilience data exchange for senior-care communities, tested in a live disaster drill at a California senior living community.
Publications
14 peer-reviewed publications, 4 preprints and technical reports, and 1 patent. See Publications or Google Scholar.
Skills
- AI / ML security: AI-agent threat modeling, MCP security, prompt-injection defense (direct and indirect), tool-use and data-exfiltration testing, LLM-assisted security tooling, adversarial ML.
- Detection engineering and incident response: detection engineering, rule lifecycle (coverage / precision / latency), incident response, threat hunting, MITRE ATT&CK, variant analysis, anomaly detection, telemetry and log analysis.
- Security engineering: threat modeling, security architecture review, vulnerability management, penetration testing (web and IoT).
- Privacy and cryptography: privacy-preserving system design, cryptographic attestation, trusted execution (SGX), side-channel analysis.
- Languages and platforms: Python, Go, Java, SQL, C/C++, AWS, GCP, Linux.