Silicon security architect specializing in platform security, silicon roots of trust, and hardware-software co-design.
Currently at Apple, working on security architecture for Apple silicon. Before joining Apple, I worked on platform security for custom silicon at Meta. Earlier, at Rivos Inc. (acquired by Meta), I led the development of Darjeeling, the SoC-integrated variant of OpenTitan, an open-source silicon root of trust — from design through tapeout, silicon bringup, and full provisioning.
Ph.D. from Graz University of Technology — hardware extensions and compiler support for fault-attack countermeasures on RISC-V processors. Active bug bounty researcher with 42 CVEs discovered in GitLab. Passionate about automation and building reusable, scalable hardware-software co-designs that extend beyond security.
- Platform Security
- Silicon Root of Trust
- Fault Attacks and Countermeasures
- Hardware-Software Codesign
- Post-Quantum Cryptography
- Bug Bounty / Vulnerability Research
-
PhD in Computer Science, 2023
Graz University of Technology
-
MSc in Information and Computer Engineering, 2016
Graz University of Technology
-
BSc in Information and Computer Engineering, 2013
Graz University of Technology
Experience
- Define security architecture and requirements across Apple silicon platforms
- Collaborate with silicon and software teams to integrate and verify security throughout the SoC design flow
- Platform security for Meta’s custom silicon
- Working on Caliptra, an open-source hardware root of trust for data center SoCs
- Led development of Darjeeling, the SoC-integrated variant of OpenTitan (open-source silicon root of trust)
- FIPS 140-3 readiness for OpenTitan’s security subsystem
- Tapeout, full silicon bringup, and provisioning
- Upstreamed Darjeeling to the open-source OpenTitan project
- Research related to secure code execution in the presence of physical attacks
- Teaching: Computer Organization and Networks, Digital System Design
Security Research
Active participant in the GitLab Bug Bounty Program with 42 CVEs discovered across access control, information disclosure, XSS, and authentication bypass categories.