[donny@scyber ~]$ whoami

Donny Schreiber

I'm a cloud and product security engineer/architect at Amazon Web Services (AWS). I've secured $4B+ of cloud infrastructure across 18+ projects with some of AWS's largest customers — in healthcare, financial-services, government, education-tech, telecom, etc. I can't 'do it all', but it's likely I'll make an attempt.

From 2015 to 2022 I also played drums for Kroenke Sports & Entertainment (KSE) — in-game for the Avalanche (NHL) and Nuggets (NBA) — at night, after my Cybersecurity day-job. I still keep an Avalanche stats page. It rebuilds every night.

  1. Multi-Region IPAM on AWS

    AWS published my multi-Region IPAM architecture as Prescriptive Guidance, and I open-sourced the IPAM Terraform code (67 pools, 874 resources) on aws-samples.

    the pattern →
  2. Shift-left DevSecOps

    I cut one customer's internal security review processes from two weeks to four hours with a CI suite of 15+ scanners that only scan what changed.

    how →
  3. GenAI platform security

    I threat-modeled and helped remediate 127 threats in a FINRA-approved GenAI platform.

    related writing →

Latest writing

All posts →
· 6 min readnew
My Lane Is a Method

Security careers reward the one-word answer to "what's your lane?" — and I never had one. Then I lined up the things I actually built, from a 51-page VMware lab guide to an agentic-AI IAM tool, and found the lane was never a subject. It's a method.

PersonalCareer
· 13 min read
Home Network as Code: Zero-Trust Segmentation on a Prosumer Router

How I rebuilt my home network with the discipline I'd apply to production — Infrastructure-as-Code, zero-trust VLAN segmentation, per-client encrypted DNS — and where consumer hardware hits its limits.

NetworkingInfrastructureSecurity
· 10 min read
The Security Side of Vibe Coding: What AI-Generated Code Gets Wrong

I use these tools every day, and I'm also a security professional. A field report on what AI-assisted coding gets wrong — missing authentication, agents with too much access, secrets in the wrong place — from my own code and the research.

AI SecurityVibe CodingDevSecOps

Contact

Email and LinkedIn are the easiest ways to reach me. There's no contact form.

Email
[protected — click to reveal]
LinkedIn
linkedin.com/in/donaldschreiber
Code
aws-samples/sample-amazon-vpc-ipam-terraform
Location
Colorado