From 2014 to 2017 he was the lead developer of SecureDrop, an open source platform for journalists to securely communicate with confidential sources, and oversaw its expansion from 1 installation to over 30, including in major newsrooms such as The New York Times, The Washington Post, and The Intercept. Prior to that he was a security and privacy engineer at Mozilla, where he worked on Firefox's implementation of Content Security Policy (CSP) and experimented with techniques to protect web users from privacy-invading trackers, which lead to a collaboration with the EFF on the Privacy Badger browser extension.