Netography has created the first network-centric platform that reconstitutes capabilities disrupted by the combined impact of encryption and Atomized Networks across the security world. Enterprises have become functionally blind to the composition and activities of their networks, resulting in increased dwell time and more attackers leveraging the gaps between the capabilities of an organization’s other tools and the siloed operations teams who operate them.Netography Fusion is for enterprise security operations center (SOC) and cloud operations teams that need scalable, continuous network visibility across the Atomized Network – legacy, on-premises, hybrid, multi-cloud, and edge environments. With the Netography Fusion platform, these teams gain visibility and control of network traffic and context across users, applications, data, and devices, to see what they are, what they are doing, and what’s happening to them.

Tripwire delivers advanced threat, security and compliance solutions used by thousands of organizations, including over 50% of the Fortune 500. Tripwire enables enterprises, service providers and government agencies around the world to detect, prevent and respond to cyber security threats.• Led product management, strategy, and technology partnerships for a product portfolio used by over50% of the Fortune 500.• Led a team of 18 across Office of the CTO, driving improved planning and execution for a 350-person global R&D team resulting in a 66% increase in product value delivered over a two-year period.

Managed engineering teams for vulnerability management, configuration assessment, and security analytics product lines. Accountable for product design, delivery, security research, security content development, and portfolio integration in an Agile software development lifecycle.

nCircle provided vulnerability management, configuration assessment, and advanced reporting analytics for large enterprises.• Led 70-person team including engineering, technology strategy, and innovation for the company’s complete portfolio of products, including vulnerability management, configuration assessment, and security analytics. Accountable for all aspects of the product development lifecycle.• Executed an Agile transformation that transitioned a waterfall software development organization to a more efficient SDLC that resulted in increased R&D productivity and alignment with business objectives.

Founded cybersecurity product company introducing the first agent-less security configuration assessment product in the security industry.• Started as founding CEO, assembling an engineering team and raising venture capital.• Transitioned to CTO in 2004, guiding product direction and engineering.

• Developed the initial releases of the ISS RealSecure network and host-based intrusion detection system products as the lead engineer at this early pioneer in the security industry.• Founded the ISS X-Force security research group, establishing content development practices for the company.As a security researcher, I am credited with discovering the following vulnerabilities:• CVE-1999-0628, CVE-1999-0085: Rwho daemon overflow• CVE-1999-0114: Elm filter handles temporary files insecurely• CVE-1999-0123: Linux mailx mktemp race condition• XF-411: mount/umount stack buffer overflow• CVE-1999-0242: pop3d mktemp creates insecure temporary files• CVE-1999-1186: rxvt print-pipe allows a user to execute commands as root• CVE-1999-0318: XMCD "XMCD_CDDBPATH" stack buffer overflow• CVE-1999-0319: xmcd titlestr buffer overflow• CVE-1999-1292: Kolban Webcam32 can be remotely crashed or potentially used to execute arbitrary code• CVE-1999-0969: Microsoft Windows NT snork attack can disable system• CVE-1999-1240: CDDB servers have a remotely exploitable buffer overflow• CVE-1999-0680: Microsoft Windows NT TSE denial of service can consume all available memory• CVE-1999-1491: Linux abuse.console undrv program could allow execution of commands with root privileges* Note: 1999 indicates the first year of CVE's existence, not the year of vulnerability disclosure for those that pre-dated its creation.