Qualifications
Expertise that counts.
Roles, education, certifications, training, speaking, and research behind 18+ years in cybersecurity and intelligence.
Current roles & affiliations
Director, Digital Defense Center (DDC)
Southern Company · enterprise IT and OT cyber defense

SANS Certified Instructor Candidate
Lead author of FOR589: Cybercrime Investigations
Co-chair, SANS DFIR Summit
Chairman, IT-ISAC Data Center SIG
Board service

Faculty, Evidence-Based Cybersecurity (EBCS) Research Group
Georgia State University

Founder, CTI-League Darknet Intelligence (CTIL Dark)
SANS 2020 Difference Maker
Career
Founder & Leader, Equinix Threat Analysis Center (ETAC)
Equinix · built a global, multidisciplinary team
Head of Threat Intelligence & Incident Response
KPMG US
Security Consultant, Counter Threat Unit (CTU)
Dell SecureWorks · six years; built the first virtual HUMINT team
Counterintelligence Contractor
U.S. Department of Defense

Human Intelligence (HUMINT) Collector (35M)
U.S. Army Military Intelligence
Specialties
Education

University of Arizona
Bachelor of Business Administration (BBA), Business Information Systems
Speaking
Conferences, summits & podcasts

EC-Council Hacker Halted

CTI-League Hackathon Summit

The Cyber5 by Nisos Podcast

The Darknet of Things: Hunting Cybercriminals
SANS DFIR Summit
SANS webcasts
Publications & research
Writing and open research
SANS blog
Mythos: Forget the Model. Follow the Workflow
With Thomas Roccia
SANS Threat Analysis Rundown in Review: The Post-Mythos Defender's Playbook
SANS Threat Analysis Rundown in Review: Stopping the Poison Before It Reaches the Water Supply
SANS Threat Analysis Rundown in Review: Identity, Geopolitics, and a Passing of the Torch
Women In Russian-Speaking Cybercrime: Mythical Creatures or Significant Members of Underground?
With Anastasia Sentsova and Will Thomas
HUMINT and Its Role Within Cybersecurity
With Jon DiMaggio
Research & industry
Curated Intelligence
Curated Intelligence









