Collaborating with security, compliance, identity, and management product and research teams to enhance the efficiency and effectiveness of autonomous security operations.

Enabling organizations to defend at machine speed and scale using generative AI.• Leading a team of product managers to deliver the first generative AI security product offering.• Leveraged security subject matter expertise, customers and data to derive use cases and deliver value through the product.• Successfully launched early access of the product with hundreds of customers within 6 months from joining, bringing significant clarity and definition to the original product concept. • Working across 10+ other product teams to jointly build use cases and deliver on customer asks within the product. • Leveraging understanding of market, technology and Microsoft position to constantly inform a product strategy that allows us to remain differentiated and ahead of the market. • Training customers and internal employees on how to tactically apply generative AI across security, compliance, identity and management use cases.

Responsible for Microsoft Defender Threat Intelligence, Microsoft Defender External Attack Surface Management and always iterating on strategies to best capture market opportunities in cybersecurity.• Designed and executed integration plan to deliver RiskIQ TI and EASM product offerings within Microsoft in less than a year from M&A. • Worked across multiple teams internal to Microsoft to coordinate the successful building and launch of two new product offerings at Microsoft. • Designed and got CEO approval for multi-year threat intelligence strategy that would bring multiple threat intelligence teams together with a common publishing cycle. • Worked with multiple product teams to integrate intelligence solution into Defender and Sentinel product offerings. • Educated and supported product team to understand Microsoft solutions and broader product vision.

Hired from acquisition of RiskIQ. New owner, same mission––make the Internet a safer place. Working across Microsoft to deliver security intelligence for a multi-cloud world.

Post M&A, continued to support NinjaJobs. Major projects included:• Launching additional job properties to expand to other markets. These platforms drove additional demand within the existing NinjaJobs platform.• Continued product and development work to optimize the NinjaJobs experience including a new price/packaging model to adhere to shifts in business spend and automated ingestion of third-party job platforms. • Launching a weekly newsletter that provided organizations and users insights into the job market based on NinjaJobs data.

Company acquired by HireIQ.Partner member, primary developer and product strategist for NinjaJobs, a cyber security focused job board and placement service. Transformed a working proof-of-concept job platform into a business exceeding $1M in revenue and assisting thousands of professionals find jobs. Major projects included: • Outlined and constructed a new service model focused on user growth and better enablement of our placement services• Rewrote NinjaJobs completely from scratch to include better tracking insights, integrations with 3rd-party systems, more options for job seekers and easier administration for the support team• Built an automated pipeline between NinjaJobs and our candidate tracking system to seamlessly feed new contacts, actions and job postings directly into the recruitment workflow• Created a support-based workflow that allowed users to engage directly with NinjaJobs staff in order to offer better placements, platform support and feature usage• Outline marketing campaigns and promotions to highlight platform growth and increase overall engagement

Company acquired by Microsoft. Led the deal process with CEO and financial advisors.As the VP of Strategy, Brandon generates and manages business strategies that take advantage of market, industry and economic opportunities while mitigating risks. Leveraging deep industry relationships and product development experience, Brandon seeks to expand RiskIQ's global footprint in order to achieve maximum growth.

Building innovative solutions to help organizations better understand risks and threats to their digital presence. Responsible for product management and product marketing for the business. Specifically focused on defining processes that allow product to coordinate across all departments within the organization.• Led product team from $15M to $50M ARR on broad suite of security products.• Formed multi-year strategy for the company and worked across multiple teams to achieve significant progress.• Assisted sales in progressing, closing and supporting customer deals.

Focused on scaling PassiveTotal as a product with the support of RiskIQ. During the first year at RiskIQ, a lot of focus was spent on product, sales, marketing and continued development for PassiveTotal. - Scaled PassiveTotal systems to keep up with customer demand. This included moving our systems from one VPS provider to another, splitting our web traffic from API traffic and introducing horizontal scale with various load balancers to evenly distribute requests.- Identified various datasets within RiskIQ that would be great additions or improvements to PassiveTotal and added those in. - Created numerous 3rd-party integrations and apps with providers like Splunk, QRadar, Flashpoint, Facebook, Intel 471, Slack, MISP, CRITs and many more.- Worked across the company to enable product, sales and marketing to understand PassiveTotal and identify key ways to sell the product- Created several support tools to enable various teams to understand data from PassiveTotal including usage, engagement and churn- Built several marketing tracks to nurture PassiveTotal users based on their progress within the system- Created various data pipelines to enable marketing (Marketo), support (Intercom), sales (Salesforce) and other verticals inside of the company

Company acquired by RiskIQ during tenure at Facebook.Co-founder and lead developer at PassiveTotal, a threat analysis platform focused on infrastructure research. Built the company from the ground-up starting with a PoC platform and moving to a full enterprise solution. Noteworthy achievements can be found below:- Built a fully instrumented product with role-based access control, 3rd-party integrations and unique visualizations- Constructed an automated flow to feed platform metrics on users directly into a CRM system to enable faster sales qualification and pipeline development- Outlined, built and iterated multiple marketing campaigns focused on user retention and engagement using custom code- Create product marketing materials to use for sales, marketing and business development- Used relationships in the industry to build an organic following within the product- Forged various partnerships with 3rd-party data providers and services companies to further expand our product capabilities

Worked on the threat infrastructure team in order to surface abuse on the Facebook platform. Primary focus was building tools within the local environment to improve detection and ability to action malicious activity faster.Major projects included: • Disrupting several criminal groups of actors exploiting various Facebook properties• Building actor/group profiles on several groups to better understand TTPs over time and how our actions impacted our visibility• Tracking cyber criminal and nation state groups abusing the platform in order to identify how widespread their operations are.• Analyzing data across multiple locations and services to identify anomalous activity.• Defining a strategic framework that proposed a range of suggestive actions to be taken based on the service being abused and the sophistication of the malicious actor.• Developing tools on Facebook-specific technology to bring together different internal and 3rd-party data sources.

Liaison between the Counter Threat Unit (CTU) and Data Science (DS) team to take tactical research capabilities and merge them into strategic, big data goals. Major projects included: • Designing and implementing a four node Elasticsearch cluster to process and store Virustotal data collected from their APIs. Final cluster was processing 60K events per hour with data storage nearing 500GB and 200M documents.• Creating a custom search interface on top of Elasticsearch so that analysts could use easily defined grammar to identify new points of research. • Working with the data science team to identify how to improve machine learning algorithms and data access to the threat teams.• Using associative rules and probability measurements in order to predict where a domain would resolve to next using historic passive DNS data. • Using TF-IDF with custom analyzers to identify related bodies of text to reduce time spent reading multiple articles describing the same news event.• Working with the big data team to propose a new design in storage and analytics processing to move beyond merely using Hadoop.

Perform security research and work across multiple teams to provide technical guidance. Major projects included: • Abstracting multiple data sources and creating custom APIs to automate the intake of unstructured data. • Designing and completing a highly customizable environment capable of creating dynamic networks within minutes using VMware 5 REST APIs and custom code. • Advocating and implementing the usage of graph-­‐based technologies, both visual and non-­‐visual, to better organize and represent connected threat data. • Piloting several “incubations” to profile threat operator activity once local on a system to better identify threats established within an organization. • Reverse engineering multiple malicious tools and binaries to aid in grouping threats into intrusion sets based on a number of TTPs. • Using several statistical techniques to identify threat actors in the early stages of development, testing and attack through collected data. • Performing research into new ways to identify malicious files through machine learning techniques.

Aid in the discovery of network compromises and attacks by tuning, monitoring and creating tools to better find malicious code. Major projects included: • Performing research into identifying malicious PDF files by applying statistical analysis and machine learning to their file structure details. • Creating an online tool to perform static analysis of PDF files using multiple open source tools and custom code complete with API. • Developing a front-­‐end interface and assisting on a custom correlation engine to better improve reporting and daily monitoring of threat incidents.• Monitoring and tuning the university IDS installation for alerts and responding to incidents.• Performing forensics on high profile cases where data may have been stolen.

• Work with Chief editors to decide which articles will be suitable for the magazine.• Verify and review software, book and article reviews submitted by other authors to ensure quality and integrity.• Published several articles and reviews throughout 2007 and 2008.

• Designed and built a fully functional website using advanced server-side and client-side technologies to document restaurants featured on TV.• Added the ability to interface with YouTube, Yelp and Flickr APIs to further enhance the user experience.

Teaching Advanced Data Protocols - Covering packet structure of DNS, ARP, TCP, UDP, IP v4/v6 and protocol workings.

Serve as a technical resource for both G2 and customers in all areas of IT including, but not limited to security, networking, virtualization, and programming.Major projects include:• Assisting on a design for a completely open development lab utilizing ESX, Lab Manager, and Virtual Center as well as virtual routing appliances and hardware switching to perform quick provisioning of development resources.• Designing and implementing several customer portals utilizing client certificates and AD for authentication, each providing segmentation of data based on AD role and group.• Leading research into and assisting on developing web services security through the use of open standards such as SAML, XML, XACML, WS-Security and SOAP with the addition of IBM’s Datapower Xi50.• Designing and deploying a custom Datapower solution into a network that addressed and solved a means of authenticating to several services using SAML, integrating an existing Active Directory store into Datapower’s authentication methods, developing a custom authorization method using Datapower extension functions and providing a solution to correlate several different log events through SOMA calls.• Assisting on numerous penetration tests, phishing efforts and web application security assessments.• Performing vulnerability research on embedded network devices, and analyzing reactions to specific queries issued from various sources. After identifying a vulnerability, an exploit was created and disclosed to the vender.• Designing and deploying custom InfoPath forms and workflows in to MOSS 2007 and WSS 3.0 environment.• Preparing technical references and in some cases training to customers on how to use specific technologies.

Begin development using a variety of languages to complete customer driven projects and tasks.Major projects include:• Writing a C# and Java suite of tools to consume GoldDisk XML content and output SCAP compliant data streams.• Creating and implementing features for a web front end using PHP, JavaScript and the EyeOs framework.• Writing a module complete with an administrator interface to properly handle and display various time-related statistics using open Flash Charts for every user within the company. • Designing, developing and releasing a suite of tools (GUI, CLI and Web Application) to abuse cellular networks.

Serve as a key contributor and owner of corporate IT assets, resources, policies and other duties to maintain order within G2.Major projects include:• Building a company portal providing every employee with a social network interface complete with profiles, chatting and numerous ways to share information.• Developing numerous custom modules for the open source Drupal framework to organize users and profiles, interface with the time keeping system data, pull data from the job tracking database and poll the XMPP chatting server for presence to display.• Implementing a ticketing system to track corporate IT issues and development projects.• Implementing source control and a proper storage backend for project repositories and other important data resources.• Assisting in the development of a complete infrastructure overhaul to move all physical corporate servers to virtual ESX machines complete with fail over and fault tolerance support using an IBM SAN backend.• Drafting hundreds of pages of documentation and procedures to administer the assets and applications on the G2 network and then converting those documents into searchable pages that could be hosted within the company portal.

Worked closely with clients to complete services in a timely and professional mannerHave developed and implemented solutions for:- Physical hardware problems- Network connectivity, design, and troubleshooting- Network based surveillance- Malicious code inspection- Backup and recovery - User administration

Provided support and maintained a range of networking equipment including Cisco routers (2611, 3845), Cisco switches (2950, 3524, 3548, 4006), Cisco Pix 515e firewalls, and Dell servers (6850, 2950, 2970). This included configuring and troubleshooting dynamic routing protocols BGP and EIGRP an addition to MPLS and VRF routing.Major projects included:• Building, designing and testing two functional field site labs. This included building all ESX servers from the ground up and thoroughly testing each device to ensure quality and connectivity.• Creating custom scripts/programs for both ESX and daily activities using Python and Bash to automate tasks.• Reorganizing a sponsored million dollar student lab including 5 full racks housing over 100 devices and servers, cable runs and the labeling schema in a manner that even the least technical could follow.

Operated and programmed various circuit boards for numerous contracts and customers. Maintained database of board programs and network drive for department.Major projects included:• Programming over 25 different boards into the Automated Optical Inspection database for future use.• Stenciling and inspecting hundreds of boards.• Assisting with the loading, maintenance and operation of the pick and place machine.• X-Raying boards to ensure a complete solder flow had taken place• Implementing and maintaining data storage policy on the segmented network.