Bio

Your data is one of your most valuable assets — the better you protect it from attack, the better your reputation will be with discerning customers. I'm a Lead Threat Detection & Response Engineer, Threat Hunter, and Researcher — I defend organizations against security threats and protect their data and customers from damage and loss. I analyze attacker tactics, develop detections & preventions, and implement security controls to manage my company’s overall risk. I'm the creator and maintainer of Dorothy — a tool to help security teams test their monitoring and detection capabilities for their Okta environment. I presented Dorothy at Black Hat USA. I've developed APIs, tools, and workflows for automating security operations tasks to detect & respond to threats to a company's brand and customers before any damage occurred. I'm proficient in Python and the implementation and principles of Detection-as-Code. I enjoy teaching and sharing knowledge with others by public speaking, blogging, mentoring, and running capture the flag (CTF) events. I’m a contributor to the MITRE ATT&CK knowledge base of adversary behavior and co-authored ''The Elastic Guide to Threat Hunting''. You can find a collection of my contributions to the information security community here: https://github.com/threat-punter/community-contributions My recent focus areas for research and detection engineering are Windows, macOS, Okta, and AWS. I have extensive experience in various cybersecurity and IT domains including threat hunting, detection engineering, incident response, digital forensics, and malware analysis. Certifications: CISSP, GMON, GCIH, GREM, GCFE, CCNA Security, CCNA Routing & Switching, ITIL, Security+