Bio

Welcome to my LinkedIn Profile and thank you for taking the time to read it! I work at the intersection of cybersecurity and data science, as Chief Futurist for Tenzir. I am an expert in cyber security with a dual technical and business focus. I started out as a hands-on practitioner working in SOC's, and conducting penetration tests and vulnerability research for vendors like Qualys and Tenable Security. I soon progressed into more strategic roles, including as a research director for Gartner. Today, I lead research teams and run technical and content-driven marketing programs. While I tend to work more in Tableau, Word, or PowerPoint, and am more likely to develop competitive analyses and product strategies, I am still happy and known to throw out some Python code with Pandas or Seaborn, or conduct a research investigation into a threat actor group. I wrote the German and Dutch “Hacking for Dummies” 1st and 2nd editions, have been interviewed, cited, and quoted frequently by media and academia, and have written for Securityweek, CSO Online, and Dark Reading, amongst others. I also co-named the Security Orchestration, Automation and Response (SOAR) market category, and worked on the SIEM Magic Quadrant. My main areas of interest and expertise, and topics that I have researched, advised, or worked on, are threat and vulnerability management, security analytics and AI, SOAR, security operations management, incident response, and managed security services. I am a strategic advisor for Picus Security and Arcanna AI. My most recent published works include: The Case for a Bug Bounty Program of Last Resort https://techzoom.net/static/whitepapers/bug_bounty_of_last_resort_2021.pdf O.Rochford, S.Frei, with the Chair of Entrepreneurial Risks D-MTEC, ETH Zurich. Cited in OECD Report on “Encouraging Vulnerability Treatment” How Lucrative are Vulnerabilities? https://www.sciencedirect.com/science/article/abs/pii/S1361372319301241 O.Rochford (Tenable Research). Received extensive press coverage, Computerweekly, IT Pro Network Graph Analysis for Suricata and Zeek using Brim and NetworkX https://medium.com/brim-securitys-knowledge-funnel/visualizing-network-cyber-attacks-with-suricata-and-zeek-using-brim-and-networkx-332dd265d4b6 O.Rochford (Brim Security)