Michael Bingham

Background

About Michael Bingham

to my profile I’m a Security Engineer at Shopify. I boostrap, scale and hotfix our security programs. Right now I'm building our Red Team, which is very fun, using offensive security to build a more resilient and secure Shopify. I've jumped around different security roles a lot though, so here’s some of the other things I’ve done that I've loved and can stuff keywords into: Improved Shopify’s zero trust architecture, especially MFA // FIDO // WebAuthn, macOS device security, and employee authorization systems. Built and led a team working on product security, partnering with all sorts of people to ship secure and trustworthy products at critical touchpoints for payments, money movement, and consumer facing surfaces. Ran Shopify’s PCI program, and helped create our other compliance programs (especially SOC 2, as well as privacy, regulatory and contractual frameworks). Along the way I’ve also been involved (for better or worse!) in both sides of vendor risk assessment, mitigation of fraud, spam and phishing, as a technical SME during incident and threat investigation, and as an SME during partnership and contract negotiations.