Jeff Moss

Jeff Moss

About

Detail

VP IT & Security @ Curative | CISO | CIO | Advisor | Investor
Bend, Oregon, United States

Timeline


work
Job
school
Education

Résumé


Jobs verified_user 0% verified
  • CURATIVE
    VP IT & Information Security
    CURATIVE
    Aug 2026 - Current (3 months)
  • Aphinia
    Member
    Aphinia
    Apr 2024 - Current (2 years 7 months)
  • Israeli Startup Advisory Network ISAN
    Member
    Israeli Startup Advisory Network ISAN
    Mar 2024 - Current (2 years 8 months)
  • J
    Co-Founder
    JJM Enterprises LLC
    Jul 2002 - Current (24 years 4 months)
    JJM is a family owned and run limited liability company that established its roots in commercial real estate. Over the years, JJM has diversified into stocks, bonds and seed funds.
  • Ro
    Senior Director, Product Security
    Ro
    Jul 2024 - Aug 2026 (2 years 2 months)
    Brought in to lead a product and cloud security transformation at Ro, a vertically integrated telehealth company spanning patient, provider, and pharmacy services. Direct security programs across product, cloud, data, AI, privacy, and offensive security—embedding security into the platform’s core architecture while ensuring compliance in a complex, regulated healthcare environment. Drive cross-functional strategy and delivery in collaboration with engineering, IT, legal, compliance, and clinical teams.

    Highlights:

    - Security Transformation: Led a maturity uplift across product, cloud, and data security domains, advancing benchmarks significantly within the first year.
    - Platform-Embedded Security: Acted as product
  • Incode Technologies
    Head of Security & IT (Acting CIO/CISO)
    Incode Technologies
    Dec 2023 - Jul 2024 (8 months)
    Led the buildout and transformation of Security and IT at Incode, a global AI/ML identity company serving highly regulated industries including finance, gaming, healthcare, and government. Transitioned the security function from a matrixed model into a centralized, high-performing organization aligned with product, engineering, and go-to-market strategy.

    Oversaw enterprise security, insurance, cloud infrastructure, risk management, and global IT operations. Helped position the company for market expansion by embedding security into offerings, partnering closely with legal, sales, and product teams. Represented Incode in international cybersecurity policy initiatives.

    Highlights:

    - Security Transformation: Bu
  • Incode Technologies
    Sr Director, Information Security
    Incode Technologies
    May 2023 - Dec 2023 (8 months)
    Led global security for Incode, a $1B+ AI/ML identity verification company serving highly regulated industries including finance, gaming, healthcare, and government. Built the company’s first dedicated security organization, driving strategy and execution across enterprise security, product security, IT operations, cloud, compliance, and risk. Worked cross-functionally to embed security into offerings and enable go-to-market growth. Represented the company in industry-wide security initiatives and forums.

    Highlights:

    - Built and led Incode’s first dedicated global security organization, evolving a matrixed function into a dedicated enterprise team.
    - Supported new product launches and market entry by integrating s
  • Rebellion Defense
    Chief Information Security Officer
    Rebellion Defense
    Sep 2022 - Feb 2023 (6 months)
    Led the development and maturation of Rebellion’s first enterprise-wide security function within a fast-paced, multinational AI/ML defense environment. Progressed from architect to CISO in under two years, scaling security across unclassified and controlled unclassified domains. Built cross-functional programs to support mission-critical delivery, enabling secure, iterative development in highly regulated and compartmentalized environments. Partnered closely with engineering, legal, and executive teams to embed security into organizational strategy, while driving cross-border compliance and risk management initiatives.

    Highlights

    - Program Buildout: Launched and scaled Rebellion’s first dedicated security organization,
  • Rebellion Defense
    Deputy Chief Information Security Officer
    Rebellion Defense
    Dec 2021 - Sep 2022 (10 months)
    Led the development and maturation of Rebellion’s first enterprise-wide security function within a fast-paced, multinational AI/ML defense environment. Progressed from architect to CISO in under two years, scaling security operations across unclassified, controlled unclassified, and classified domains. Built cross-functional programs to support mission-critical delivery, enabling secure, iterative development in highly regulated and compartmentalized environments. Partnered closely with engineering, legal, and executive teams to embed security into organizational strategy, while driving cross-border compliance and risk management initiatives.

    Highlights

    - Program Buildout: Launched and scaled Rebellion’s first dedicate
  • Rebellion Defense
    Senior Information Security Architect
    Rebellion Defense
    Mar 2021 - Dec 2021 (10 months)
    As an early security hire, I established foundational security practices, tooling and cloud native infrastructure to mature the company's security posture and meet strict compliance requirements. I established risk management and maturity benchmarking which resulted in risk based prioritization and a better understanding of resource allocation needs.

    Successes included the development of a practical product security program and DevSecOps pipeline that introduced key product security components (static application security testing, software composition analysis, license compliance, and secret detection), achieving 85% adoption of the pipeline within two months, rolling out a risk program, setting the groundwork for Kubernetes in
  • F Teams
    Principal Software Engineer, Cybersecurity
    F Teams
    Jun 2020 - Mar 2021 (10 months)
    I joined F9 Teams to drive cybersecurity, architecture and software engineering improvements with the Air Force. I architected and implemented a scalable supply chain security system to secure the development of Air Force's command and control software applications. Our team developed a SaaS from the ground up that performs scalable and ephemeral analyses on code and artifacts from automated security tooling including static application security testing, dynamic application security testing, software composition analysis, malware detection and image/OS vulnerability detection. Through this work, I also significantly reduced attack surface through the architecture, design and implementation of zero trust utilities across multiple developer d
  • Auth
    Engineering Manager, Product Security
    Auth
    Jan 2020 - May 2020 (5 months)
    Led a geographically dispersed remote team of 5 responsible for the Product Security program of a 500 person, high-growth, $1b valued, Customer Identity and Access Management SaaS startup. Areas included responsibility of the secure development lifecycle, vulnerability management, offensive security, third party penetration testing, secure design and architecture, incident support, security awareness and training, operation of security tooling and development of security critical libraries. Reported directly the Director of Product Security. Helped prepare quarterly Board reporting and prepared and delivered quarterly program reporting.
  • Auth
    Product Security Lead
    Auth
    Aug 2019 - Jan 2020 (6 months)
    Responsible for the technical direction and decision making of the Product Security Team. Activities included offensive security, secure architecture, design and implementation, vulnerability management, incident response, security awareness and training, configuration and operation of security tooling and the development and maintenance of security critical libraries and custom tools.
  • Auth
    Senior Product Security Engineer
    Auth
    Jan 2019 - Aug 2019 (8 months)
    Performed a variety of activities to improve the security of the Auth0 product and surrounding pipelines / infrastructure. These activities included offensive security, secure architecture, design and implementation, vulnerability management, incident response, security awareness and training, configuration and operation of security tooling and the development and maintenance of security critical libraries and custom tools. Developed an Attack Library specifically tailored to exploit OAuth2 and OpenID Connect in a step-by-step manner.
  • Tripwire
    Senior Software Engineer
    Tripwire
    Jun 2018 - Jan 2019 (8 months)
    Designed and developed enterprise security software and related automation and deployment systems. System Co-Owner for environment automation systems. Identified, reviewed and validated security issues and implemented mitigations. Managed and coordinated penetration tests. Key contributor in the architecture and implementation of authentication, authorization and identity and access management. Member of the Software Security Group.
  • Tripwire
    Software Engineer
    Tripwire
    Apr 2017 - Jun 2018 (1 year 3 months)
    Software engineering primarily on the enterprise product with a focus on security and automation. Member of the Software Security Group. Developed and maintained development, deployment and testing automation using vagrant, chef and docker. Involved in authentication and authorization architecture and implementation. Coordinated external penetration tests on the enterprise product.
  • O
    Software Developer
    Oregon Public Employees Retirement System
    Feb 2016 - Apr 2017 (1 year 3 months)
    - Implemented software security improvements for legacy systems.
    - Designed and created RESTful services and front end applications.
    - Developed Angular 2 front end applications to access custom APIs.
    - Served as DevOps Core Team member implementing best practices, advanced tooling and providing training to developers.
  • O
    IT Project Manager / Part-time Developer
    Oregon Public Employees Retirement System
    Mar 2015 - Feb 2016 (1 year)
    - Responsible for delivery of all software releases for maintenance and enhancements to various systems within the Oregon Retirement Online Information Network (ORION).
    - Led team in the development of a new system and service oriented architecture for the IAP defined contribution retirement program.
    - Part-time developer for Enterprise Content Management Section.
    - Led business, technical operations, DevOps, and development staff for software releases and IT projects.
  • O
    Project Manager
    Oregon Public Employees Retirement System
    Sep 2014 - Mar 2015 (7 months)
    - Led enterprise-wide IT and business projects including the replacement of general ledger software, decommissioning and data migration of a legacy system, and successful programming and delivery of over 270,000 member statements.
  • Oregon Department of Transportation
    Strategic Systems Project Manager
    Oregon Department of Transportation
    Feb 2014 - Sep 2014 (8 months)
    - Developed strategies to decommission old enterprise systems, ultimately saving millions in total cost of ownership.
    - Managed business analyst and led the early planning and analysis for system development.
    - Represented business operations on technology projects, tested and implemented operational improvements.
  • Oregon Department of Transportation
    Project Delivery Programs Coordinator
    Oregon Department of Transportation
    Jan 2013 - Feb 2014 (1 year 2 months)
    - Led project teams to improve the delivery and efficiency of projects, programs and supporting functions across the agency.
    - Led integration project that resulted in accelerated and economical contracting, design, and environmental methods for rail crossing projects.
    - Facilitated a work zone safety initiative with industry executives, leading to technological, educational and enforcement enhancements across the state.
  • Oregon Department of Transportation
    Project Leader
    Oregon Department of Transportation
    Sep 2010 - Jan 2013 (2 years 5 months)
    - Led multi-disciplinary teams to deliver engineering designs for transportation projects ranging from $50k to $45m.
    - Led research projects resulting in the implementation of efficient and economical technologies for urban stormwater treatment.
    - Member of the Region 1 ODOT Emergency Operations Center and Safety Committee.
  • P
    Certified Flight Instructor
    Professional Air Services
    Jun 2002 - Sep 2006 (4 years 4 months)
Education verified_user 0% verified
  • Oregon State University
    Bachelor of Science (B.S, Computer Science
    Oregon State University
    Jan 2014 - Jan 2016 (2 years 1 month)
    Graduated Summa Cum Laude. Pursued degree while working full time.
  • Portland State University  School of Business
    Masters, Business Administration with concentration in international business
    Portland State University School of Business
    Jan 2008 - Jan 2010 (2 years 1 month)
    Studied abroad in the United Arab Emirates in sustainable enterprise and Saudi Arabia in international finance.

    Developed a marketing plan and implementation strategy based on collected and analyzed research for a local financial services company.
  • Oregon State University
    BS, Civil Engineering
    Oregon State University
    Jan 2003 - Jan 2006 (3 years 1 month)
    Team developed case designs (Corvallis, OR downtown bridge and roadway infrastructure) as educational projects.
  • The University of Texas at Austin
    N/A, Aeronautical and Astronautical Engineering
    The University of Texas at Austin
    Jan 2001 - Jan 2003 (2 years 1 month)
    I transferred from University of Texas to Oregon State University to pursue a degree in Civil Engineering.
  • Central Oregon Community College
    N/A, General Studies
    Central Oregon Community College
    Jan 2000 - Jan 2001 (1 year 1 month)
    Attended while concurrently enrolled in High School.
This is a community-created genome.