About

I'm a Senior Security Engineer at Spotify. Before that I was at AWS, where I forged some lasting skills and professional relationships, as well as a healthy dose of the “please don't let me get paged at 3am again” attitude towards designing systems. These days I work around the intersection of security, distributed systems, and AI.

I like security engineering that survives contact with reality: understanding the threat model, keeping privileges narrow, designing safe failure modes, and making the result observable enough that the person on call can understand it. Good controls should make systems easier to trust and operate, not merely produce more paperwork. Systems will fail in all the modes you anticipated and more, so failure shouldn't be catastrophic. It should be anticipated and managed with backups, runbooks, and the occasional mental-wellness exercise.

That mindset follows me home. Most of the projects here started with a small annoyance and turned into an excuse to explore Linux, networking, self-hosting, automation, or agentic systems. I enjoy owning the whole path from the first threat model to the boring bits: backups, monitoring, recovery, and documentation. That said, at home I'm basically the only customer, so I'm willing to outsource plenty of work to AI automation 🤖, apart from the fundamental security decisions. With a human (me) in the loop, that means faster results and more time to explore other things.

I'm interested in what AI can genuinely improve, but wary of opaque automation with broad permissions and no useful audit trail. I prefer agentic harnesses with explicit boundaries, verification, and a human still accountable for the outcome, but I'm a wholehearted believer in the productivity gains when it is applied appropriately.

Away from projects and anything else that smells like work, I keep up with security podcasts (Darknet Diaries, Risky Business), have a healthy fascination with all things East Asia, devour books mostly in Audible form, and spend more and more time at home or out with family nowadays, much to my happiness and the chagrin of my once-impressive Steam achievement progress and hours in-game.