My story
From Securing Software to Shaping What's Possible.
My career has been built at the intersection of cybersecurity, software engineering, and technology leadership. With over a decade of experience, I've led application security initiatives, built and matured security programs, managed enterprise vulnerability management efforts, and worked alongside engineering teams to integrate security throughout the software development lifecycle. My expertise spans application security architecture, threat modeling, security testing, SAST, vulnerability remediation, and integrating security controls into development pipelines.
But my work has never been just about finding vulnerabilities. It's about understanding how systems are designed, how applications are built, where risks emerge, and how to implement solutions that work in real-world engineering environments. I've spent my career translating complex security challenges into actionable strategies, helping organizations strengthen their security posture while supporting the speed and innovation that drive software development.
As AI-assisted development evolved, I recognized an opportunity to expand how I applied that experience. I began turning my own ideas into functioning applications, working across architecture, development, integrations, testing, and deployment. That experience expanded my perspective as both a security engineer and a builder, giving me firsthand insight into the decisions, trade-offs, and engineering challenges involved in creating software.
Today, Code Review Guru brings these disciplines together through software development, application security services, and practical education. Through my work and YouTube channel, Lyght, The Code Review Guru, I document real projects, explore emerging technologies, examine development practices, and demonstrate how security can be integrated into building software rather than treated as an afterthought.