experience // capabilities // background
Résumé
Threat research leadership grounded in nearly two decades of hands-on work across industrial systems, infrastructure, and adversary operations.
Research lead focused on securing industrial control systems and critical infrastructure. Nearly two decades tracking cybercrime and state-aligned operations, with deep experience in protocol fuzzing, RF analysis, campaign attribution, honeypots, public reporting, and security assessments.
experience
- Lead cybercrime and underground research into threat actors, illicit markets, and emerging criminal operations.
- Drive strategic threat intelligence initiatives across ICS/OT and critical infrastructure.
- Mentor research teams on threat analysis, campaign attribution, and public reporting.
- Author technical reports and present research at security conferences.
- Led research on cybercrime, state-aligned operations, and emerging threats.
- Designed, deployed, and monitored distributed honeypots.
- Researched RF technologies for ICS/OT detections and investigations.
- Authored reports and presented findings at conferences worldwide.
- Led control-system security assessments and gray/black box engagements.
- Built ICS-focused Nmap scripts including ENIP-info, S7-info, and BACnet-info.
- Performed protocol fuzzing in Python and Ruby; presented S4x14 “PLCPwn.”
- Conducted RF assessments with GNU Radio, KillerBee, and RFCat; developed custom Nessus audits and the S4x15 ICS CTF.
- Implemented and maintained Tenable SecurityCenter across IT and OT environments.
- Led control-system assessments, penetration tests, and regulatory testing for FISMA and NERC.
- Presented to the ICS Joint Working Group and developed scenarios for DHS CyberStorm III and GridEx.
- Served as NERC CIP SME for CIP-005/007 and held a US Secret clearance.
- Designed OSPF and managed control-system networks, SSL VPN, and RSA SecurID.
- Administered Cisco PIX/ASA/WLC, routing and switching, CA Spectrum, and Cisco ACS.
- Performed Nessus and IBM AppScan vulnerability testing across IT and OT.
- Completed advanced Red Team training through the National SCADA Test Bed.
- Administered SUSE/Red Hat, macOS Server, and Windows Server 2003.
- Managed Mac labs and departmental core services.