In previous roles at Fortify Software and Hewlett-Packard, he worked on new techniques for applying static program analysis and runtime instrumentation to the problem of software security.