I work in the security risk and compliance space, but my main portfolio is about making threat modelling easy and scalable for the software engineers. I usually shy away from generic high level cookie cutter stuff in this domain that doesn't work for people who have to actually use it. Throughout my security career my favorite part has been about making risk management relevant and valuable for people I get to work with. I love learning how people actually create apps/services on cloud platforms and am currently getting some experience about securing AWS workloads.