About Matt

Security Architect, Martial Artist, Dad, Strength Coach, & Appalachian Through and Through.

I’ve spent the better part of two decades working at the intersection of national defense technologies, diplomatic and personal security, high-stakes problem solving and risk management. I”ve built a career around securing complex systems and infrastructure, mitigating risk, and helping organizations make better security decisions.

Today, my work spans cybersecurity architecture, cloud security, governance and AI risk management, identity security, vulnerability management across large enterprise environments. I’ve designed security architectures, developed governance and policy frameworks, implemented enterprise security platforms, and helped translate technical risk into decisions leadership can actually act on.

But cybersecurity is only part of the story. The mindset behind the work was developed long before I entered the field.

Cybersecurity Path

A black belt is just a white belt who never quit.

From the mats to the NOC to the SOC, the mindset has remained remarkably consistent: learn the fundamentals, understand the problem, adapt when circumstances change, and execute.

I’ve carried that approach throughout my cybersecurity career, earning certifications across CompTIA, Microsoft Azure, AWS, Google, Linux, and ExtraHop while continuing advanced training in cloud security, offensive security, governance, architecture, and incident response.

My experience has grown from hands-on technical support and systems administration into enterprise cybersecurity engineering and architecture, including cloud security, penetration testing, identity and privileged access management, vulnerability management, network detection and response, data security, third-party risk management, and cybersecurity governance.

Increasingly, that work also includes the rapidly developing intersection of artificial intelligence and cybersecurity: understanding how organizations can govern and secure AI systems while also exploring how AI can improve security operations.

Technology changes quickly. The responsibility to understand what you’re securing, why you’re securing it, and how the pieces fit together doesn’t.

You’ll also find my takes on emerging attack surfaces and defensive design in The Art of Cyberwar, where I draw from martial strategy, terrain analysis, and threat modeling to build a layered security mindset. And for those prepping for certs or architecting in AWS, I’ve created the Zen and the Art of AWS Security blending technical how-tos with real-world mental models to navigate cloud architecture under fire.

Martial Arts, Fitness & Coaching

Long before cybersecurity, there were martial arts. I’ve spent 40+ years immersed in martial arts, training across China, Taiwan, Thailand, and the U.S. I’ve studied and taught disciplines that demand precision under pressure. Whether it’s been Wing Chun, Jeet Kune Do, Muay Thai, BJJ, CSW, or Chen Style Taiji Quan. Whether it’s trapping hands, push hands, sweeps, weapons training, or submissions, the fundamentals are the same: position before submission.

That same ethos shaped my strength & conditioning career. For over two decades, I’ve coached competitive athletes in multiple martial arts, Olympic Weightlifting and CrossFit guiding athletes to multiple medals, PRs, and setbacks alike. My training philosophy is simple: the standard is the standard. No gimmicks, no shortcuts, just the highest quality training and aspire to achieve virtuosity.

Coaching has had as much influence on how I think as training itself. Different athletes can encounter the same problem for entirely different reasons. The job isn’t merely knowing the answer. It’s understanding the person standing in front of you well enough to determine which answer actually applies.

That lesson translates remarkably well beyond the gym.

Off The Mats

I’m also a writer, mountaineer, photographer, and lifelong student of subjects that have little apparent relationship to one another until you spend enough time with me.

Austrian economics, U.S. diplomatic history, U.S. Foreign Policy, evolutionary biology, the history of the Colonial Era, the Antebellum South. Also, the causes & consequences of World War I, World War II, the Cold War all the way through the GWOT and how we ended up in the current “war” in Iran.

As the old saying goes, “Curiosity tends to wander. So do I.”

From the ridgelines of Blue Ridge, Georgia, to the peaks of Cherokee, NC, from the Linville Gorge, through the Linn Cove Viaduct, to Sugar Mountain, Boone, up to Hawksbill and Hazel Mountain, VA. I’ve hiked, climbed, and explored nearly every stretch of the Blue Ridge Parkway and Skyline Drive. The Great Smokies and the best of East Tennessee? Those trails help shape my endurance and refine my worldview. And these mountains are more than scenery to me. They’re where I go to think, explore, reset, and occasionally focus on just how small most supposedly enormous problems really are.

If You’re Here, You’re Probably Like Me

You take security seriously, but don’t take yourself too seriously. You value strength in your systems, your team, and yourself.

You believe competence matters more than appearances, curiosity shouldn’t disappear when formal education ends, and discipline doesn’t need to announce itself.

It shows up, it does the work, and it keeps improving.

That’s largely what this site is about: cybersecurity, cloud, AI, training, programming, history, martial arts, shooting, sky diving, philosophy, and whatever else happens to be occupying my attention strongly enough that I think it’s worth writing about.

If something here makes you reconsider an assumption, investigate an idea more deeply, or simply gives you something useful to take with you, then it has done its job.

And one last thing: A black belt is just a white belt who kept showing up. Getting that black belt doesn’t mean you’ve reached the end. It means you’ve finally made it to being intermediate.

Onward
—MSS