I have operationalized threat intel platforms, integrating them with SIEMs and modernizing SOC workflows. This enabled greater coverage and visibility for cyber defense, reducing the severity by improving MTTx. It also enhanced intelligence reporting because understanding your environment and your threats leads to more effective products.
I have built and led CTI teams and functions that span across the intelligence spectrum, driving threat hunt operations with F3EAD/OODA Loop frameworks, applied selection of structured analytic techniques. Frameworks are important to anchor analysis into trusted methods to produce high confidence assessments, detections, hunts, and strategies.
I’ve coached analysts to foster a holistic approach to threat intelligence instead of maintaining a single view of tactical, operational, or strategic. Intelligence is a full lifecycle, touching each stratum of intelligence when the whole is greater than the sum of its parts. Seeing analysts grow from simply observing and reporting to ATT&CK mapping intrusions, clustering, and campaign tracking brings more excitement to me than finding the smoking gun myself.
I have influenced strategic visions and directions based on a concrete understandings of an organization’s key risks and considerable threats. Successfully influencing stakeholders to implement positive change at the highest levels requires an innate ability to understand the problem(s) at hand through empathy and objectivity which is a balancing act in and of itself.
Need CTI to fit, conform, grow, scale, perform, succeed? I’ll do it.
#cti
#threatintelligence
#cyberthreatintelligence
#threatintel
#infosec
#cybersecurity