Daniel Miessler Email & Phone Number

California, United States

New York, Us

Helping the company on both the security and AI sides, focused on features, messaging, etc.

San Francisco, Ca, Us

Seattle, Wa, Us

San Francisco, California, Us

Founder and CEO of Unsupervised Learning, a product, services, and media company with the mission of helping people transition to Human 3.0.I believe one of the biggest problems facing the world is a coming lack of purpose in people's lives, which is being magnified by the rise of AI. To address this, I've built a platform called Human 3.0 (H3), which is a training curriculum, skillset, and maturity model designed to assess and progress people from an old system where AI is a threat to a new system where AI is an asset.The system is based on mandatory self-definition and articulation, learning and adopting very particular mental models and skillsets, and achieving specific milestones along the path to a new type of career based in meaning instead of drudgery and uncertainty.

San Francisco, California, Us

Durham, North Carolina, Us

Menlo Park, California, Us

Built the Vulnerabiltiy Management Program at Robinhood.Key accomplishments included:- Design of the program which was focused around continuous attack surface management- Hired the team to build and operationalize the program through automation and process integration- Executed on the program and gained full support from the C-team and engineering leadership- Went from concept to full buy-in and operationalized remediation within 18 months

Cupertino, California, Us

Managed the team that measures the effectiveness of security efforts at Apple.

Wakefield, Ma, Us

I am the creator and leader of OWASP's IoT Security Project. This project is designed to help manufacturers, developers, security researchers, and consumers to better understand the security risks present in Internet of Things products and systems.The project is an umbrella with a number of sub-projects beneath it, including the Attack Surface Project, the Top IoT Vulnerabilities List, and the Firmware Security project. New projects are being added all the time.

Wakefield, Ma, Us

Served as one of three project leaders for the OWASP Mobile Top 10 project. Participated in weekly meetings to determine the threats, vulnerabilities, and risks that would become part of the next version(s) of the list.I am not currently active as a project leader due to my focus on leading the OWASP IoT Security Project, but am still a contributor.

Seattle, Washington, Us

Created the offering and worked as a Virtual CISO for IOActive's Advisory Services group.Role included performing multi-faceted Risk Assessments on Fortune and Global 100 customers around the world. Assessment types included: Threat Modeling, Data Flow Analysis, Threat Scenario Analysis, and Security Program Efficacy Assessment.

Seattle, Washington, Us

Served as the Practice Director for Client Advisory Services for IOActive, Inc. In this role I built the initial offerings for the practice, oversaw its launch into the marketplace, managed the overall performance of the practice, as well as oversee and perform delivery for our top customers. Included in the portfolio are a number of services built uniquely for IOActive, including a Security Program Assessment Framework based on an adversary-based approach to risk management, and a Strategic Trend Analysis Briefing that prepares executives for upcoming shifts in IoT, AI, and other technologies that may impact their business.As part of this role I also speak regularly at conferences, participate in various industry panels, and serve in the SME role for media inquiries on the topics of IoT, enterprise security, and overall Information security and technology trends.In addition to the practice management, consulting, and media aspects of the position, I continue to perform active technical research and analysis in the areas of IoT and enterprise security. I also serve as leader for the OWASP IoT Security Project, and remain active as a programmer on a number of interesting projects. (See: https://github.com/danielmiessler)

College Park, Maryland, Us

Served as advisor on all matters related to security—both internally facing and technical, as well as in product and marketing.

Founded and runs HELIOS, a security SaaS company that continuously and actively monitors a company's external attack surface.

Houston, Texas, Us

Currently serving as Practice Principal within HP Fortify's Fortify on Demand group. Was the second employee in this group (behind the then and current director) approximately 5 years ago. Continue to provide leadership in the organization in the following ways:* Lead the Fortify on Demand research and innovation group* Manual security testing of flagship web and mobile applications for key customers* Management of all technical penetration testing and vulnerability assessment methodologies* Continue to enhance and expand the Fortify on Demand mobile practice* High-level customer interactions and relationship management* Application and enterprise security consulting for the the world's top companies* Conduct private executive briefings on current threats and solutions* Regular speaking engagements at customer locations and industry conferences* Innovation, design, and management of construction of new service offerings* Provide competitive analysis and strategic direction In this role I work directly with the Director of Fortify on Demand (Ryan English) to ensure that our practice is #1 in the cloud-based Application Security space. This involves activities ranging from testing key applications for our top customers, to managing and enhancing all of our testing methodologies, to presenting to and consulting with customer executive teams on how best to build out their security programs. Other key activities include substituting for the Fortify CTO and GM of Enterprise Security Products for key executive briefings and helping product managers and senior management predict where market trends are heading in order to build future-oriented solutions for customers.Role continued from previous position, with expanding responsibilities as the team grows in size.Have taken on a team of 6 over the last year to magnify those efforts.

Houston, Texas, Us

Served as a Principal Security Architect with Hewlett Packard. Role highlights include:* Manual security testing of flagship web and mobile applications for key customers* Management of all technical penetration testing and vulnerability assessment methodologies* Continued to enhance and expand the Fortify on Demand mobile practice* High-level customer interactions and relationship management* Presented nationwide on web and mobile security* Assisted upper management with competitive analysis and strategic direction* Conducted private executive briefings on current threats and solutions* Regular speaking engagements at customer locations and industry conferences* Innovation, design, and building of new technical service offeringsIn this role I work directly with the Director of Fortify on Demand (Ryan English) to ensure that our practice is #1 in the cloud-based Application Security space. This involves activities ranging from testing key applications for our top customers, to managing and enhancing all of our testing methodologies, to presenting to and consulting with customer executive teams on how best to build out their security programs. Other key activities include substituting for the Fortify CTO and GM of Enterprise Security Products for key executive briefings and helping product managers and senior management predict where market trends are heading in order to build future-oriented solutions for customers.

Houston, Texas, Us

Served as Senior Security Architect within HP Fortify's Fortify on Demand group. Was the second employee in this group (behind the then and current director) approximately 5 years ago. * Manual security testing of flagship web and mobile applications for key customers* Management of all technical penetration testing and vulnerability assessment methodologies* Continued to enhance and expand the Fortify on Demand mobile practice* High-level customer interactions and relationship management* Presented nationwide on web and mobile security* Assisted upper management with competitive analysis and strategic direction* Conducted private executive briefings on current threats and solutions* Regular speaking engagements at customer locations and industry conferences* Innovation, design, and building of new technical service offeringsIn this role I work directly with the Director of Fortify on Demand (Ryan English) to ensure that our practice is #1 in the cloud-based Application Security space. This involves activities ranging from testing key applications for our top customers, to managing and enhancing all of our testing methodologies, to presenting to and consulting with customer executive teams on how best to build out their security programs. Other key activities include substituting for the Fortify CTO and GM of Enterprise Security Products for key executive briefings and helping product managers and senior management predict where market trends are heading in order to build future-oriented solutions for customers.Role continued from previous position, with expanding responsibilities as the team grew in size.

Houston, Texas, Us

Served as a Principal Application Security Consultant with Hewlett Packard. Role highlights include:* Security testing of flagship web and mobile applications for key customers* Managed all technical penetration testing and vulnerability assessment methodologies* Presented nationwide on web and mobile security* Assisted upper management with strategic evaluation and analysis* Innovation, design, and management of construction of new service offerings* Continued hiring and training of technical talentRole continued from previous position, with expanding responsibilities as the team grew in size.

Houston, Texas, Us

Came on board as the second employee (first engineer) in HP Fortify's Fortify on Demand group (behind the then and current director). Role included the establishment of the group's technical offerings as well as both delivery and management of all technical engagements. Highlights included:* Manual security testing of flagship web and mobile applications for key customers* Management of all technical penetration testing and vulnerability assessment methodologies* Establishment of the Fortify on Demand mobile practice* High-level customer interactions and relationship management* Assisted upper management with competitive analysis and strategic direction* Innovation, design, and building of new technical service offerings* Hiring of the group's founding members* Hiring and training of the group's security testers

Columbus, Ga, Us

Served as a Senior Security Engineer at Aflac. Role highlights included:* Application Risk Management* Web Application Testing* Application Threat Modeling* Application Security Design Review* Enterprise Security Architecture* Assisting with securing of acquisitions* Assisting with high-level security operations with Aflac JapanHandled the risk management of all applications being built within the organization from design to decommissioning. Built a system for tracking, assessing, and remediating all applications in the portfolio as they moved through the lifecycle.

Irvine, California, Us

Served as a Senior Information Security Consultant at DynTek. Role highlights included:* Performing Enterprise Risk Assessments* Performing Network and Web Vulnerability Assessments* Performing Network and Web Penetration Testing* Completely autonomous execution of engagements* End-to-end execution of customer engagementsThis position required me to act as a one-man consulting team -- performing the full range of engagement activities, including: inbriefings, auditing and interviews, all technical work, producing the report and presenting the findings.

Columbus, Ga, Us

Served as a Senior Information Security Analyst at TSYS. Role highlights included:* Firewall Engineering* Intrusion Detection and Prevention, * SIEM Monitoring and Management* Vulnerability Assessment and Penetration Testing* Windows/UNIX/Linux System Administration and Security* General Security ArchitectureIn this role I served in a number of roles ranging from building and hardening Sun and Linux servers, to administering and troubleshooting the firewalls within a highly segmented and complex environment, performing vulnerability assessments, to helping management understand various technical risks.--Previous positions within the company leading up to the current/final role include:* Information Security Engineer (~1 year)

Americus, Ga, Us

Served as Information Security Manager at Georgia Southwestern State University. Role highlights included:* Building/Enhancing the Campus Security Architecture* System Hardening* Implementing Intrusion Detection* Implementing Secure Infrastructure Services (DNS, Web, Mail)* Responding to security incidentsIn this role I served under the head of information technology at campus headquarters as the head of all campus information security. This involved hardening the campus servers vs. constant attack, detecting and mitigating threats, and improving the security architecture to make those tasks easier.

Americus, Ga, Us

Served as a Web Developer for Georgia Southwestern State University's School of Education. Role highlights included:* Creating online web courses for distance learners* Building the web structure, design, media, and authentication mechanisms* Ensuring the course lectures and exams could not be manipulated or bypassed* Required knowledge of HTML, CSS, JavaScript, Flash, Shockwave, and AuthorwareIn this role I served as the primary web developer for Dr. Jim Neale who ran the technology division for the school of education. He was one of the first professors in the country doing full distance learning programs, and my position was responsible for enabling it technically.This included building the sites themselves,updaing all content, ensuring the sites were attractive, and making sure they couldn't be purposely misused by students or otherwise compromised by anyone malicious.

Served as Systems Administrator at the Rosalynn Carter Institute. Role highlights included:* Supporting all desktops installations* Building and hardening of all core IT services (Web, Mail, etc.)* Support of all Windows and Linux Servers* General IT requestsIn this position I handled all IT and IT security for the 20 person Institute. This included everything from general desktop and phone support to building and hardening their Windows and Linux servers, securing their website and mail infrastructure, and generally keeping all of their IT operatings running smoothly.

Arlington, Virginia, Us

Served as an Airborne/AirAssault Infantryman and Intelligence Analyst in the United States Army. Role highlights included:* Standard Infantry training* Airborne* AirAssault* Scored a 3+ on the Spanish exam at the Defense Language Institute* Civilian SCUBA Training in Sinai, Egypt* A Deployment to Sinai, Egypt on a peacekeeping mission* Served as the official translator in Egypt due to my Linguist designation for Spanish* Reviewing information related to potential terrorist threats* Secure Storage of Sensitive Information* Completed 40 hours of College Credit while in service* Processing security Clearances* Held a Secret Security Clearance* Honorable DischargeIn this role I served both as an AirBorne and AirAssault Infantryman and later as an Intelligence Analyst for the 1/327 Battalion of the 101st Infantry. Left service honorably in order to attend university.