First security hire at tastytrade, through its acquisition by IG Group under FINRA scrutiny.
I joined as the first and only dedicated security hire, brought in to build a real program from nothing ahead of a $1B acquisition and under active regulatory scrutiny. The tools existed on paper but were not working: an EDR deployed without alerting, and a SIEM bought and never configured.
I stood both up properly, built a product-security framework and an operations team, and created a two-track threat-intelligence function. One side watched customer-account fraud and takeover on a platform where people manage real money; the other tracked application vulnerabilities in the wild during the Log4j crisis. After the deal closed I ran North American security on a follow-the-sun model, and that program became the acquirer's entry point into the US market.