Automation for AppSec at AWS (Part 2)
Context Is Infrastructure
In Part 1, I described how the SHINE team at AWS evolved from deterministic automations to CDK Blueprint Property Injection to the Agentic Security Engineer. I ended on a line that...
#ai
Write Claude Skills. Don't Depend on Them.
Why Skill Repos Struggle Where SaaS Succeeds
There is a pattern in security automation that repeats itself. Someone writes a smart script or skill that does something valuable, puts it in a shared repo, and schedules it to...
AI-Driven Development (AIDD) Without the Hype
What Actually Changes When AI Writes More of Your Code
This post is something I wish someone had spelled out when I was getting my hands dirty again; how to do AI-Driven Development (AIDD) in a way that actually holds up. I’d recently...
Why I Joined Pixee
And How We're Building the Future of AI-Powered Application Security
After nearly four years at AWS, I made the decision to leave in early December and join Pixee as a Distinguished Engineer, focusing on AI Security. I didn’t take it lightly. I’m...
Automation for AppSec at AWS (Part 1)
Automation Before the AI
My time at AWS was spent working on application security at scale, most of that time building and leading the SHINE team (Security Hub of Innovation and Efficiency). Our mission to...
Hello World
The Sequel
Welcome. This is my second attempt at creating and maintaining a blog. My first go at blogging was way back when I was trying to break into the cybersecurity field. Like so many in...