For a while I was building without much of a plan. Now I have one — and it's why this site looks the way it does.
Everything in Selected Work happened before the plan existed. It's still here because it's real proof I can ship systems people depend on, and that turns out to matter a lot in security — you can't secure what you don't understand how to build.
The plan itself: Application Security first, since it's the most direct use of that instinct. Cloud Security and DevSecOps after, once AppSec gives me the foundation both of those actually need.