I work at Microsoft on the Devices Security team. Previously I was a security engineer on ASP.NET.