Drew's Professional Resume

Security architect and AI framework author with over 6 years of experience. Creator of @dcyfr/ai — a portable open-source TypeScript AI agent framework with plugin marketplace, delegation system, and 20+ specialist agents published on npm. Leads global security programs, incident response, and secure development practices. Specializes in cyber risk management, vulnerability management, and autonomous AI agent architectures.

Professional Badges & Certifications

Loading certifications...

Technical Skills & Expertise

Loading skills...

Drew's Professional Resume

Career Metrics

Years Experience

AI & Cybersecurity

Badges Earned

Professional recognitions

Technologies Used

Tools & platforms

Roles Held

Career progression

Professional Timeline

MS Information Security Engineering

SANS Technology Institute

Jan 2024 → Present

Defensible Security Architecture
Hacking Techniques & Incident Response
IT Security Planning, Policy, and Leadership
Security Essentials

Founding Architect

DCYFR Labs

Jan 2025 → Present

Authored and maintain @dcyfr/ai — a portable open-source TypeScript AI agent framework with plugin marketplace, multi-provider LLM support (OpenAI, Anthropic, Ollama, GitHub Copilot), and delegation framework. Published on npm.
Designed and shipped plugin marketplace security architecture: trust scoring engine, TLP classification, Docker sandbox isolation, automated CVE scanning, and 8 adversarial scenario mitigations.
Architected delegation framework v2 with reputation engine, HMAC identity verification, SLA contracts, and TLP clearance enforcement for secure multi-agent task routing.
Maintains 20+ specialist AI agents, a workspace automation platform (30 scheduled jobs), Axiom observability integration, and a proprietary context engineering knowledge system.

Founding Engineer

GameShark Labs LLC

Apr 2026 → Present

Founding engineer (contract) on the relaunch of GameShark — a 30-year gaming brand — as a digital content platform.
Lead engineering on SharkVault, the flagship web product: Next.js and Supabase, covering authentication, entitlements, subscription billing, and content access control.
Established the platform security baseline — row-level security policies, automated database invariant checks, and pre-launch hardening.

Principal Security Engineer

Monks

Jul 2023 → Present

Led audits to certify offices for ISO 27001, SOC2, TISAX, and TPN, ensuring compliance with industry standards.
Implemented technical controls, reducing global vulnerabilities by 23% and enhancing security posture.
Streamlined incident response processes, achieving a 35% reduction in global response times.

Security Engineering & Operations Lead

Monks

Jul 2022 → Jul 2023

Enhanced operations and incident response programs, ensuring swift and effective response times.
Developed policies and procedures for mergers and acquisitions, securing incoming integrations.
Led threat hunting and vulnerability management projects to address security risks proactively.

Information Security Engineer

Monks

Jul 2021 → Jul 2022

Developed security operations and engineering programs to enhance organizational security posture.
Conducted technical audits, identifying vulnerabilities and prioritizing future security initiatives.
Served as a Subject Matter Expert, providing insights and recommendations directly to the CISO.

Co-founder, VP, CTO, CISO

Information Security Network, Inc.

Sep 2019 → Sep 2021

Served as VP on the Board of Directors, aligning IT and security objectives with nonprofit strategies.
Led seminars and training events at BSides and Hack Pensacola, enhancing community engagement.
Collaborated with local groups like DC850 to promote security awareness and education initiatives.

Security Operations Analyst II

Creative Breakthroughs, Inc.

Dec 2020 → Jul 2021

Triaged and validated level one escalations, leading incident response for over 20 client contracts.
Collaborated with engineering teams to resolve operational issues and enhance procedures.
Developed tailored playbooks and documentation for diverse client environments.

IT Security Specialist

Escambia County Commissioners Office

Mar 2020 → Dec 2020

Developed a comprehensive security awareness program, enhancing phishing detection by over 40%.
Triaged alerts and conducted forensics and incident response for over 1k CJIS-certified systems.
Applied CIS and NIST controls to bolster security for public and emergency support systems.

BAS Cybersecurity

Pensacola State College

Dec 2020

Computer Science Academic Scholar
Cyber Defense Club Training Officer
Capture the Flag Competition Lead
National Technical Honors Society
3x National Cyber League Gold Bracket Finalist