Tony M.

About Tony M.

I specialize in securing complex cloud and software ecosystems at the scale of Fortune 100 organizations. My expertise lies in bridging the gap between high-level security strategy and deep technical implementation—from low-level firmware to hyperscale AI environments.Currently, I am driving the strategic modernization of security assurance at Intel, establishing the foundational, AI-driven architecture utilized across the enterprise Secure Development Lifecycle (SDL). I focus on building resilient environments and fostering a strong security culture that enables teams to deliver exceptional, secure outcomes at speed.Key Achievements:• Foundational AI Security Assurance: Architecting enterprise-grade Agentic, RAG, and MCP workflows to provide developers with autonomous, high-fidelity auditing capabilities. This includes a 4-stage Agentic AI framework that automates the transition from threat modeling and hunting to call-stack fuzzing for exploit verification in driver and firmware code.• Hyperscale Cloud Leadership: Served as Director and Lead Architect for Intel’s AI Cloud; defined a defense-in-depth, Zero Trust strategy for a multi-tenant hyperscale environment, securing bare metal, VM, and managed Kubernetes environments (100+ clusters) interconnected with AI compute.• Enterprise-Scale Governance: Chair of Intel’s Software Security Architecture Review Forum. Overhauled the corporate threat modeling program, resulting in a 5x increase in identified threats and an estimated $30M in annual cost avoidance.• Organizational Leadership (BISO): Jointly led security for a organization with 400+ concurrent projects, boosting product security compliance from 60% to nearly 100%.Core Expertise:Agentic AI Security • Cloud Architecture (AWS/Azure/K8s) • Firmware & Low-Level Auditing • Secure SDLC at Scale • Threat Modeling • Zero Trust Architecture • Regulatory Compliance (NIST, SOC2, GDPR) • Incident Response Leadership

Experience

1. Sr Principal Engineer & Lead Software, Ai and Cloud Security Architect

   Intel

   May 2016 — Present

   Chair of Intel’s Software Security Architecture Review Forum; led 300+ threat model and design reviews spanning firmware to cloud systems- Standardized company-wide review processes and architectural requirements boosting findings and mitigations by 5x and achieving $30M in annual cost avoidance- Maintained a zero-breach record across 100+ cloud projects reviewed to dateSpearheaded a year-long cloud security transformation, collaborating across 12 organizations to prioritize 24 security gaps using frameworks like CSA’s CCM; developed a two-year executive-backed roadmap that eliminated redundancies and accelerated time-to-market.• Authored the Enterprise Cloud Security Architecture Guide (AWS/Azure), covering IAM, networking, and secrets management; reduced architectural findings by 75% and established clear security best practices across DevOps and operations.• Architected and scaled a global hands-on threat modeling program with 12 instructors across seven geographic regions, significantly increasing security maturity company-wide.• Directed post-merger SaaS integration, developing a tailored security governance and risk mitigation approach that accelerated compliance and onboarding for acquired technical teams.• Co-founded and provided initial technical leadership for an enterprise-wide software penetration testing team, growing the organization to 30+ security professionals.

Education

• University of Maine

  Bachelor, Computer Science, Minor - Business

• Boston University

  Master of Science, Computer Science, concentration Security

Skills

• Object Oriented Design
• Security Testing
• Cryptography
• Integration
• Software Defined Radio
• Embedded Systems
• Security Architecture Design
• Databases
• Sdlc
• Unix
• Information Security
• Internet of Things
• Agile Methodologies
• Security
• Distributed Systems
• Cloud Computing
• Linux
• Training
• Testing
• Vpn
• Software Engineering
• Networking
• Application Security
• Software Development
• Security Engineering
• Threat Modeling
• C++
• Mentoring
• Presentations
• Network Security
• Architectures
• Sdl
• Device Drivers
• Tcp/Ip
• Secure Communications
• Wireless
• Security Analysis
• C
• Penetration Testing
• System Architecture