I spent a decade as a software and data engineer before moving into cybersecurity. That path taught me what most security trainers never learn — what it actually feels like to be the engineer on the other side of the security finding. Most recently, I led security and privacy posture management at Autodesk, where I threat modeled business-critical applications. Now I run hands-on security workshops at conferences like BSides Chicago, BSides SF, and BSides Tampa, teaching engineers to think like attackers during design, not after the breach. I created the AppSec Mindset Academy workshop program and have trained 100+ engineers across industry and conference settings.