Tim Malcomvetter Email & Phone Number

Wirespeed's goal is to change your relationship with Managed Detection & Response (MDR). We are the world's first completely automated MDR provider, faster than adversaries, but that doesn't mean anything if we're not trustworthy, consistent, and painless. We already are what the best MDR providers will someday become.With Wirespeed, MDR has never been faster or easier:- Onboard in minutes- Integrate in seconds- Verdicts in milliseconds- Secure instantlyWe are 100% Automated MDR:- Wirespeed Fast. (No lag, latency, or legacy)- Consistent Verdicts. (No late night mistakes, no LLM hallucinations, no alert fatigue pressure)- Pain Free. (We only escalate when it's something important we can't do for you)Come see for yourself with a Free Trial. Put us head-to-head against whatever you're using now.https://wirespeed.co

Clutch45 is a cybersecurity advisory consultancy and incubator. The name is derived from clutch (noun): a collection of eggs at incubation, for which some species may lay up to 45 or more at a time.

Minneapolis, Minnesota, Us

Responsible for leading strategic micro-adjustments to an already category king (offensive security) cybersecurity business with the intent to grow higher customer retention through innovative and market disrupting continuous and proactive security testing subscription offerings, best-in-class partnerships, and simpler go-to-market motions, all while transforming an exclusively professional services business to a mix of product and service subscriptions (ARR).

Columbia, Md, Us

Providing the perspective of corporate red teams and their needs to a security startup focused on delivering better red and purple team solutions to government and private sector organizations.

Kansas City, Mo, Us

Joined Cyderes when it was the managed security startup venture under the Fishtech Group, leading all of Engineering of our flagship platform on greenfield, cloud-native tech stacks with full CI/CD automation and scaling via Kubernetes + Serverless, becoming Google Cloud Security's premier partner and defining our product roadmap strategy during a period of more than 200% growth YoY. Led the technical differentiation for Fishtech's successful acquisition by the private equity firm, Apax Partners, which led to the merger with the Herjavec Group, another Apax portfolio company. In a little over a year following the merger, our combined customer count tripled as I led the integration of two managed security services organizations to 100M ARR. Delivered managed SOC, SIEM, Endpoint & Network Security at scale, with industry leading in-house developed technology around our big data pipeline and SOC automation. Architected sales enablement and contract templating to maximize customer satisfaction. During my tenure I also led our Red Team service delivery (which moved to our Professional Services organization post-merger), our Customer Success function, and internal IT/CISO function. I started at Fishtech with a team of 12, but at the peak, I led 450 engineers, analysts, and managers.

Kansas City, Mo, Us

Joined Fishtech Group as the CTO of the Managed Services early stage startup, Cyderes, which drove majority value in a private equity acquisition by Apax Partners. I then led the merger with the Herjavec Group, with the Cyderes brand persisting as the new brand for the combined company.

Bentonville, Arkansas, Us

Built a world-class, geographically-distributed Red Team program combining existing and novel technical, social, and physical TTPs (Tactics, Techniques, and Procedures) to prepare the world’s largest company across 6 continents with more than 2 million associates and 200 million unique weekly customers, spread across legacy on-premise and cloud (Azure, GCP, and AWS). We created an innovative Rules of Engagement which enabled constant, multi-threaded adversarial pressure at Walmart scale to prepare the business to respond to real adversaries, while balancing the needs of our Blue Team peers. Partnering with our Quantitative Risk teams, we used the FAIR methodology to measure the loss magnitudes of our exercises like real incidents, to present the message in the language of the business.Additionally, the Red Team operated as a tech startup, streaming out adversarial capabilities using agile software engineering: - full CI/CD pipelines for our adversarial toolkit- custom, unit-tested stagers and implants to complement commonly available tooling (C++, C#, GoLang, Python)- safety checks, sandbox evasions, and canaries- custom hardware backdoors with 4G/LTE egress- smart centralized multiplayer backend (.NET, Redis, and open source)- custom phishing engines that matched our scale- spun up private collaboration tools & credential vaults- logged to our own ELK stacks- automated the creation of OPSEC-safe, ephemeral redirectors across a variety of providers in multiple countries- burned through hundreds of DNS domains per year with a curated, aging inventory- created our own Capability Maturity Models to measure our program over time and drive our investmentCo-founded Sp4rkCon, Walmart's free annual public information security conference.IN RUBRUM VERITAS

Denver, Colorado, Us

Joined Fishnet Security prior to the merger with Accuvant via the Blackstone acquisition of both companies.• Delivered consulting engagements to large enterprise clients, including global multi-nationals.• Successfully exploited numerous e-commerce applications, web services, mobile applications, Point of Sale (POS) systems, client-server applications, legacy TCP socket services on mainframes, various networks and operating systems, and even devices such as fuel pumps and car washes, demonstrating the exfiltration of credit card (PCI), personnel, financial, and other sensitive data.• Performed code reviews on Java, .NET, PHP, JavaScript, and other common languages, finding vulnerabilities that commercial scanning tools missed.• Tested international applications with user interfaces in Spanish, Portuguese, Mandarin, and other non-English languages.• Discovered and received attribution for several CVEs in commercial products.• Technical lead, mentor, and report quality reviewer for the application and network security testing team assigned to Optiv’s largest client.• Led CISO penetration test debriefs and prepared executive summaries to be presented by CISOs to the CEO and Board of Directors.• Top 5 author on the company blog in 2014-2016 and overall top offensive security and application security blog author.• 2016 President’s Club Award winner for outstanding consulting performance in 2015.• Presenter at BlackHat Tools Arsenal, ArchCon, BSides Jacksonville, St. Louis Day of .NET Conference, and Missouri University of Science & Technology CTF Team Advisor.

Overland Park, Ks, Us

Application and Network Penetration Testing. Fishnet was acquired by Blackstone and merged with Accuvant to become Optiv.

Kansas City, Missouri, Us

Led a team of business-to-business e-commerce software developers as direct reports using agile methodology to build new features and integrate with key partners and systems using the .NET framework for backend and JavaScript/CSS for frontend. Notable new features delivered including site redesign to mobile first UI/UX, internationalization for global clients, and integration with Microsoft Dynamics for ERP. Served as the Subject Matter Expert for PCI and application security issues. Provided annual security training to developers.

Kansas City, Missouri, Us

Designed and implemented Identity Management solutions for the provisioning, upkeep, and termination of approximately 100,000 employees, contractors, and customers. Consolidated directories of subsidiaries and disjointed business units. Deployed collaboration tools.

Kansas City, Missouri, Us

Information security generalist; Lead PCI Analyst for Level 1 Merchant and multiple RoCs; Subject Matter Expert for compliance issues with HR/Legal; Architected credit card tokenization; Performed subsidiary, departmental, and third party security assessments; Oversight of managed security service providers; etc.

Implemented and maintained security systems for ACS's contract with Hallmark. Left ACS for direct recruitment by Hallmark.

Kansas City, Mo, Us

Information security generalist, responsible for: first HIPAA compliance team; automated secure data exchanges with partners; monitoring and oversight of Active Directory; deploying security controls: antivirus, two-factor authentication, VPN, email filtering, et al; security operations of a 24x7x365 Level 1 Trauma Center; etc.

Richfield, Minnesota, Us

We all have to start somewhere: Computer repair and sales, including malware removal, in a fast-paced retail environment. It amazes me so many years later how much from this humble beginning sticks with me and gets used every single day.

Computer Science

Master Of Science, Information Assurance

Graduate Study In Computer Science

Bachelor'S Degree, Computer Science

Bachelor'S Degree, Sociology