Gabriel Coelho-Kostolny Email & Phone Number

San Leandro, Ca, Us

Redmond, Washington, Us

Leading the product management and engineering teams responsible for delivering Microsoft Defender External Attack Surface Management (EASM). Defender EASM is one of the two new Microsoft products I helped bring to market following Microsoft's acquisition of RiskIQ.

Redmond, Washington, Us

One of ten "Key Employees" required to sign an offer from Microsoft for the RiskIQ acquisition to close. Maintained responsibility for the Data Science, Product Management & Security Research teams moving from RiskIQ into Microsoft. All of the managers and individuals on my teams received and accepted full-time offers from Microsoft as part of the acquisition.Post-acquisition I led the definition of Microsoft Defender External Attack Surface Management and Defender Threat Intelligence, the key products derived from the RiskIQ acquisition, launching them in August 2022.

San Francisco, Ca, Us

RiskIQ, acquired by Microsoft in August 2021, was the leading independent provider of Threat Intelligence and Attack Surface Management products for enterprises.I led the Security Research, Data Science, and Product Management teams at RiskIQ.During my time at RiskIQ I was responsible for launching the Illuminate platform, which combined attack surface management and threat intelligence capabilities, and contributed to the diligence process for the Microsoft acquisition.

Acting as the estate executor for my Aunt who passed away from cancer in 2018. Gathering assets, selling off house & car, etc.

Moogsoft is the industry leader in AIOps - applying AI & ML techniques to the analysis of IT, development, and operations data to reduce alert overload and pinpoint the source of issues. Since joining Moogsoft I have worked to develop new positioning, launch materials, training, etc. to support the introduction of Moogsoft Express, the second product based on our platform, which democratizes access to the industry’s best AIOps technology in an easy to deploy SaaS offering.

Transitioned to product marketing, helping define & hire for a new function at Instart, independent of product management.

Defined & launched a new security product suite competitive with those on offer from market leaders to help unblock enterprise sales for Instart's cloud platform. After an internal education campaign, market research, and an analysis of available solutions, we developed & launched an integrated web application firewall (WAF) offering and partnered with Verisign to offer DDoS protection services. Within the first year after launch we achieved $1M+ in net new TCV, over 25% penetration of the customer base, and won new enterprise customers such as Walgreens.After the successful launch of the security suite I took over the core CDN and performance optimization portfolio including the SaaS management portal, with PM & Engineering distributed across the US & India. My team was responsible for product management and product marketing of Instart's underlying CDN, web performance optimizations, back end data platform, data analytics, and all technical documentation.

Palo Alto, California, Us

Joined Bromium as the only individual contributor PM at a fast-growing startup (~25 when I joined, now >100) with responsibility for all products, including requirements gathering/definition, UX/UI design & mockups, release project management, customer visits, etc. Remained the only individual contributor PM until September 2013.vSentry, Bromium's flagship product, uses virtualization and filesystem protection technologies to prevent malware infections and enhance endpoint security. From March 2012 to September 2013 Bromium shipped multiple releases of vSentry/LAVA (Live Attack Visualization & Analytics) for Windows covering pre-1.0 betas through to version 1.6 (1.0 GA shipped in September 2012). BMS (Bromium Management Server) is a web-based administration/analytics console introduced in December 2012 to provide management capabilities for vSentry client deployments. It has seen multiple feature releases alongside vSentry since its introduction in December 2012.Technologies in use at Bromium: Windows, Mac OS X, endpoint virtualization, filesystems, web browsers, client/server management tools, web-based server software & 3rd-party log management/SIEM integrations.

Enjoying the winter, recharging batteries, and deciding what to work on next.See my photography at gabeck.smugmug.com.

Foster City, Ca, Us

Joined Qualys to work on new realtime security offerings to complement Qualys's scan- and policy-based products. Performed market research and analysis of WAF product space and identified cloud-based WAF as a prime market (vs. appliance or software module-based). Helped define product offering, including back-end functionality and user interface.Performed market analysis of IDS/IPS space and identified potential market opportunities leveraging Qualys's core strengths and specialized use of IDS/IPS technology. Evaluated and provided report on status of IDS company acquisition completed by Qualys prior to my hiring.Took ownership of Malware Detection and SECURE Seal products. Organized Malware Detection team and set direction such that a version 2.0 demo was ready for the 2011 Qualys Security Conference with 2 weeks notice and then worked with team to finalize functionality and design for 2.0 release.

Houston, Texas, Us

Responsible for "out of the box" IT operations & security content, compliance solutions, third-party integration solutions, and EnterpriseView applications for the ArcSight product suite. ArcSight IdentityView, the flagship EnterpriseView application, correlates information from Identity Management systems with realtime event data in order to track and audit user activity and provide user and identity metrics. Other solution offerings leverage event and context information feeds to solve particular business problems around IT operations, security, compliance, etc.Daily responsibilities and deliverables include cross-team synchronization, customer and field interaction, presentations, roadmap/backlog development and maintenance, PRDs, etc.

Houston, Texas, Us

Took over as manager for the ArcSight Content Team with responsibility for all content (e.g. reports, dashboards, and correlation rules) that shipped with ArcSight's products, including Express, ESM, Logger, and Connectors. The team also provided recommendations for new product functionality and integration methods to other dev teams and product management.

Houston, Texas, Us

Lead engineer on the team providing security content (correlation rules, reports, dashboards, etc.) for ArcSight's enterprise SIM/SIEM.