Career Summary

  • Technical professional with over 25 years in various roles in information technology and information security.
  • More than fifteen years specializing in digital forensics, incident response, penetration testing, and security architecture.
  • Two-time champion of the annual DoD Cyber Crime Center (DC3) forensics challenge.
  • Seventh person ever to be certified as a Master Computer Network Exploitation Operator by the National Security Agency (NSA).
  • Active member of IANS faculty and one of five faculty supporting the Executive Communications subscription, distilling breaking cybersecurity news into executive action items.
  • Five years’ experience in network exploitation operations for DoD, awarded NSA’s highest non-combat civilian honor for my work’s contributions to national intelligence (fewer than 20 people receive this honor annually at the time awarded).
  • One of fewer than 100 professionals certified as a SANS Senior Instructor.
  • Founded a successful information security consultancy that at time of sale (2021) had more than 30 full time employees.
  • Prolific speaker having spoken at myriad national and international conferences on penetration testing, security assessment, digital forensics, and incident response. Prolific conference speaker, delivering presentations and keynotes to conferences in and out of the cybersecurity industry on a regular basis.
  • Consult with clients on high profile incidents involving digital forensics with a heavy specialization on cloud technologies, healthcare, ICS/SCADA, and defense industrial base.
  • Discovered numerous zero-day vulnerabilities, many of which were weaponized for use in penetration testing.
  • Recognized internationally as a subject matter expert in malware reverse engineering, digital forensics, incident response, security architecture, and security monitoring.
  • Developed and delivered bespoke cybersecurity training at Fortune 100 organizations and numerous government agencies.
  • Trained FBI agents and analysts on digital forensics and malware reverse engineering at Quantico and other field locations.
  • Selected as the defense expert in the Marcus Hutchins (@MalwareTechBlog, aka “guy who stopped WannaCry”) trial.
  • Frequently sought out by media organizations for quotes on complex technical topics.
  • Inventor of the Equilateral of Exclusion Risk, a framework for detection engineers to empirically choose the safest exclusions in their detections.

Exclusive Security Insights

Straight to your inbox every week or two (whenever there's something worth sharing)

By submitting you agree to receive our newsletter as well as other promotional emails.