Security where a failure is physical.

This is the edge of my work: systems where a security failure does not leak a file, it stops something essential or puts a person at risk. In automated pharmacy fulfillment, I built a quantitative risk framework for the robotics, weighing likelihood of compromise, operational impact, and patient safety, and drove remediation on critical vulnerabilities across automation and vendor-managed devices using device authentication, zero trust, and micro-segmentation.

On a greenfield industrial venture, I designed the operational-technology and industrial cybersecurity approach from the first decision, so the risks that normally surface late, insecure controls, unmanaged devices, supply-chain gaps, were engineered out up front. The throughline across both is consequence-driven and upstream: secure the system before it is built, because it will run for years and the failure mode is physical.