Led a team of threat analysts and researchers to transform the way Mandiant prioritizes, collects against, and researchers cyber threats. Our efforts ultimately resulted in a restructuring of our intelligence organization to reduce handoffs and increase cross-functional collaboration on prioritized threats and topics.

Led my team through the Google acquisition.

Started at Mandiant as a Senior Threat Analyst supporting incident response.Built three functional teams from the ground up to fill critical gaps: a function to systematically derive intelligence from Mandiant's Managed Detection and Response service.A function to identify and orchestrate Mandiant Intelligence activities in response to impactful intrusion activity affecting multiple victims, and provide those insights to Mandiant customers in near real time. This involves coordination across multiple teams and functions to ensure a common operating picture for both internal and external customers.Mandiant's first comprehensive multidisciplinary intelligence collection function that manages, synchronizes, and enables intelligence collection activities across the Mandiant Intelligence enterprise. Some of these are directly performed by my team, and most of them are performed by entirely different elements using the sources, systems, tools, tradecraft, standards and guidance provided by my team. This ensures the right work gets done the right way by the right people at the right time regardless of organizational structure.Developed the sources and tradecraft, set the vision and requirements, establish Mandiant's intelligence, surveillance, and reconnaissance capabilities that enable persistent and relentless discovery and visibility of known and emerging threats. This filled a critical gap in technology and process enabling Mandiant to extend and sustain visibility beyond intrusion investigations.Provide daily mentorship to emerging leaders in a diverse work force.Established and led a reading program that involves the selection of a quarterly book, weekly reading, and a weekly hour long guided discussion where Mandiant personnel share their diverse perspectives on the material.Pioneered data modeling changes to increase the speed, scale, accuracy, efficacy, and efficiency of threat analysis performed by Mandiant Intelligence.

Infantry, Counterintelligence, Human Intelligence, Cyberspace Operations, and Special Activities.