Grant Mccracken Email & Phone Number

South Lake Tahoe, Ca, Us

Making crowdsourced and offensive security accessible and affordable for all organizations, regardless of size or budget.1. Existing proactive security solutions in the market are inefficient.2. Because existing solutions are inefficient, they're slow, overly expensive, and hard to use. 3. As a function of being overly expensive and time consuming, organizations are (1) priced out; or (2) aren't as secure as they could be if these solutions were more efficient and affordable.4. DarkHorse aims to solve for this, making proactive security accessible and affordable for all. Efficient, affordable, scalable = DarkHorse.Breaches are expensive. DarkHorse isn't.Everyone is vulnerable. We're making it easier for organizations to learn about those vulnerabilities faster and more affordably.The end result is a slightly more secure world, one vulnerability at a time. Get started today at https://darkhorse.sh.

San Francisco, Ca, Us

Led a combined team of 80+, across five distinct departments and seven functional areas: Customer Success, Professional Services, Security Operations, Solutions Architects, Support, Pentesting Operations, and Researcher (crowdsourced) Success. Responsible as the decision-maker for delivery and execution on a wide array of strategic initiatives & projects, including client satisfaction, account health / renewals, researcher (crowd) engagement, tech / systems adoption, rapid scaling / growth, implementing efficiencies, etc. Reported directly to the CEO.Owned and managed budgeting (10M+) across 5+ distinct groups, as well as strategic & financial planning, goals / KPIs / metrics, hiring, process development / improvement, focus / prioritization, culture, and cross-functional relationships for the Operations organization.Oversaw the operationalization and execution for multiple net-new products across the business that drove an added 10M+ in bookings; notably driving innovation in pentest-as-a-service (PTaaS).Actively supported & collaborated with Sales and Marketing in developing go-to-market strategy, pricing, margins, positioning, and collateral across all product lines – serving as the resident expert in all things appsec, pentesting, and Bugcrowd.Influenced, guided, helped develop as a partner, and drove company decision making on key initiatives, vision, and planning. Drafted hundreds of pages of documentation, wrote 20+ blogs / pieces of collateral, and provided press quotes.Acted as a technical liaison / stakeholder and senior expert for design input and modeling for products & features.

San Francisco, Ca, Us

- All the same functions as performed in the VP role, but with the Sr. Director title.

San Francisco, Ca, Us

Led three distinct functions (Support, Researcher, and Solutions Architect functions); owning the budget, planning, and hiring. Launched, supported, and delivered services for 4 new product offerings.Oversaw the onboarding and supporting all clients/ programs (1000+) across the platform. Continuously reviewed and improved launch processes to reduce time-to-launch, as well as the efficiency of work – in some cases, reducing efforts by over 50%.

San Francisco, Ca, Us

Held largely the same responsibilities as the later Director role. Initially oversaw only the Solutions Architect group, but quickly took on the Researcher team, and Support group as well. Was the de facto escalation point across the entire post-sale organization. Directly enaged key clients and was instrumental in dozens of competitive wins.Presented at Appsec USA, Appsec EU, and BSides Austin.

San Francisco, Ca, Us

Operated as an individual contributor to setup and launch bug bounty programs on the Bugcrowd platform. Personally launched over 500+ programs on the platform, overhauled processes, wrote scripts and webapps to automate work (saving hours of effort, weekly), and solved for niche use cases or technical situations.

San Francisco, Ca, Us

Managed bug bounty programs for a variety of high profile clients. Duties included testing for and replicating submissions by security researchers (including XSS, CSRF, SQLi, XXE, RCE, SSRF, session management issues, Android vulns, etc), as well as interacting with the researchers, determining the value and severity of the issue, and triaging valid vulnerabilities with supplemental notations for the client.

San Jose, California, Us

-Manually performed web application penetration tests on over 150+ web applications; testing for, but not limited to, vulnerabilities listed in the OWASP top ten (such as cross-site scripting, cross-site request forgery, SQL injection, session management/authentication issues, etc) - with an emphasis on finding/testing for business logic vulnerabilities. -Reported detailed findings with replicable proof of concepts - in a manner intelligible to both technical and non-technical individuals. -Provided direct technical support in helping clients understand, replicate, and mitigate findings (via phone calls, and/or webex presentations, etc). -Managed and configured Whitehat’s Sentinel web application vulnerability scanner for ~200 sites; duties included: ensuring site coverage, setting up and maintaining scan authentication/operation, troubleshooting issues, and interacting with clients to configure scans to best meet their needs. -Became a senior resource in the department, helping newer members learn/understand vulnerabilities, assisted with on-the-job training, and provided general guidance. Also took on sensitive, priority tasks for high level clients (e.g. performing assessments in bake-offs between competing vendors – in an effort to help the sales team win a client).