Paul Antony
Across more than 15 years in security — over a decade of it full-time — I've secured cloud environments at enterprise scale for Amazon, Adobe, Securonix, and Mattel. I work where engineering rigor meets security strategy, building the automation, threat models, and secure-by-design practices that let large organizations ship quickly without compromising safety.
I care about the decisions that separate genuinely resilient organizations from merely compliant ones — cloud security at scale, AI-driven threat modeling, and security automation, plus the teams and repeatable processes that turn security from a cost center into a competitive advantage.
Cloud security at scale
Securing enterprise cloud migrations and automating continuous certification across large application portfolios.
AI-driven threat modeling
Scaling threat modeling and Secure Product Life Cycle practices, and training 700+ practitioners to threat-model and build secure software.
Leadership & strategy
Building high-performing teams and turning security from a cost center into a competitive advantage.
- 2023 — PresentSecurity Engineer Lead · Amazon
Leading secure cloud migration and automated, continuous security certification across the application portfolio. Built automation that cut Privacy review effort 50% and Incident Response review effort 30%. In separate work, threat-modeled 95+ applications through the legacy data-center-to-AWS migration.
- 2019 — 2023Senior Security Researcher · Adobe
Scaled threat modeling, Secure Product Life Cycle, and pre-audit automation across 100+ products, and ran an enablement program that trained 700+ principals, software engineers, and managers to threat-model and build secure applications — supporting a system that handled 1,000+ threat models.
- 2017 — 2019Senior Security Engineer · Securonix
Built a PySpark detection-engineering framework that drove multi-million-dollar revenue — years before AI and LLMs reached security. Also delivered 120+ presales assessments and engineered 200+ custom detection rules.
- 2016 — 2017Global IT Security Engineer · Mattel
Ran vulnerability management across 1,600+ AWS instances against OWASP, SANS, and NIST 800-53.
- 2011 — 2015System & Network Admin Manager · Sophie & Associates
Led a 20-person IT team securing 40+ servers and network systems.
I work across cloud and data centers, Python and Bash automation, containers and Kubernetes, and the frameworks that govern enterprise risk — NIST, OWASP, ISO 27001, PCI, and HIPAA. But the tools are the easy part. The hard part is translating security into what the business is actually trying to do, and that intersection of deep technical work and business fluency is where I do my best work.
The dual background isn't just a résumé line — it's how I actually spend my time. I build, I operate, and I stay close to the technology.
Home lab & self-hosted AI
Runs a private, self-hosted LLM on a home network — staying hands-on with the technology I secure by day and building the things I want to understand from the inside out.
Founder & operator
Built a short-term-rental portfolio from the ground up and runs it through a team of managers — leadership on the business side, not just the security side.
Giving back
Volunteers with and contributes to nonprofit organizations.