[donny@scyber ~]$ whoami

Donny Schreiber

I'm a cloud and product security engineer/architect at Amazon Web Services (AWS). I've helped secure over $4B of cloud infrastructure, across 18+ projects, with some of AWS's largest customers — in healthcare, government, financial-services, telecom, education-tech, etc. I love new challenges. And while I definitely can't 'do it all', I'm likely to make an attempt.

From 2015 to 2022 I played drums for Kroenke Sports & Entertainment (KSE) at night, after my Cybersecurity day-job. In-game for the Avalanche (NHL), Nuggets (NBA), etc. Those days are behind me, but my passion for hockey and the Avs isn't. These days, in place of those late game nights, I spend some of my time building fun projects like my 26-27 Avs stats page. It auto-refreshes every night.

  1. Multi-Region IPAM on AWS

    AWS published my multi-Region IPAM architecture as Prescriptive Guidance, and I open-sourced the IPAM Terraform code (67 pools, 874 resources) on aws-samples.

    the pattern →
  2. Shift-left DevSecOps

    I cut one customer's internal security review processes from two weeks to four hours with a CI suite of 15+ scanners that only scan what changed.

    how →
  3. GenAI platform security

    I threat-modeled and helped remediate 127 threats in a FINRA-approved GenAI platform.

    related writing →

Latest writing

All posts →
· 6 min readnew
My Lane Is a Method

Security careers reward the one-word answer to "what's your lane?" — and I never had one. Then I lined up the things I actually built, from a 51-page VMware lab guide to an agentic-AI IAM tool, and found the lane was never a subject. It's a method.

PersonalCareer
· 13 min read
Home Network as Code: Zero-Trust Segmentation on a Prosumer Router

How I rebuilt my home network with the discipline I'd apply to production — Infrastructure-as-Code, zero-trust VLAN segmentation, per-client encrypted DNS — and where consumer hardware hits its limits.

NetworkingInfrastructureSecurity
· 10 min read
The Security Side of Vibe Coding: What AI-Generated Code Gets Wrong

I use these tools every day, and I'm also a security professional. A field report on what AI-assisted coding gets wrong — missing authentication, agents with too much access, secrets in the wrong place — from my own code and the research.

AI SecurityVibe CodingDevSecOps

Contact

Email and LinkedIn are the easiest ways to reach me. There's no contact form.

Email
LinkedIn
linkedin.com/in/donaldschreiber
Code
aws-samples/sample-amazon-vpc-ipam-terraform
Location
Colorado