I work at Microsoft on the Device Security Services team. Previously I was a security engineer on ASP.NET.