Stephen Mott Email & Phone Number

Kirkland, Wa, Us

Camp Murray, Wa, Us

Camp Murray, Wa, Us

Camp Murray, Wa, Us

- Coordinates with Air Force partner organizations to define + scope cybersecurity defense missions- Matches missions to subordinate cyber operations squadrons for tasking and execution- Plans resourcing for cybersecurity defense missions

Camp Murray, Wa, Us

Team Lead and cyber operations SME responsible for executing missions at the Air Force’s foremost defensive unit. Leads 40+ people from a wide variety of career fields, supporting complex & sensitive objectives for military and civilian partners. Works hand-in-hand with operational planners and senior leaders of supported organizations to reduce risk and increase the security of cyber infrastructure for critical national security capabilities and mission systems. Crafts and executes a multi-disciplinary team training strategy, enabling readiness to meet US Cyber Command taskings.

Seattle, Wa, Us

Seattle, Wa, Us

Driving cross-cutting initiatives and synchronization across Amazon's Red Team, Penetration Testing Team, and Vulnerability Research Program (Bug Bounty)

Seattle, Wa, Us

Redmond, Washington, Us

Currently, the Senior Program Manager driving the development of advanced multistage attack ML detections (aka Fusion) for the Azure Sentinel cloud-native SIEM. Previously, was the Program Manger responsible for the SCUBA cybersecurity threat detection and investigation pipeline that supports more than 30 Microsoft internal service teams and customer-facing cloud security products such as Azure Sentinel, Azure Security Center (ASC), and Microsoft Cloud Application Security (MCAS). Other experience areas: - Azure KeyVault machine learning -based security detections - Microsoft threat intelligence platform (Interflow)

Mclean, Va, Us

Member of a small, high performance team developing an enterprise-scale active cyber defense infrastructure for US Air Force mission systems. Applies Agile development principles and DevSecOps methodology to develop the defensive infrastructure while concurrently using it to monitor and defend the program’s software integration development network.Hands-on experience with: -- Implementing fast, federated log correlation and analysis using ELK -- Machine Learning with Elastic.co X-pack -- Utilizing Spark to implement analyitcs leveraging the CAR data model and MITRE ATT&CK Framework -- Infrastructure automation via Puppet, SIMP, and Docker -- Windows and Linux host-based logging/sensors (sysmon, windows event logging, auditd/goaudit

Randolph Afb, Tx, Us

Independently led an elite cadre in the execution, task & resource prioritization, and scheduling of the Air Force’s most advanced and challenging cybersecurity operations training program. Planned and executed training program’s annual budget, enabling further development of the top 5% of Air Force cyber operators. Frequently advised military senior leaders, translating complex technical concepts into everyday language for risk-driven decision making. Governed requirements, operations, and maintenance of a virtualized cybersecurity training network/range. Rated by leadership as #1 of 7 program managers in division, top 10% in regional organization.

Randolph Afb, Tx, Us

I was also dual-hatted as an instructor while the Director of Operations - Advanced Cyber Training (see above). I was one of nine hand-selected cadre for the Air Force’s most advanced/demanding cybersecurity training program responsible for building, teaching, and leading Air Force operational cybersecurity experts.My focus areas included: - Host-based intrusion detection- Incident Response- Offensive cyber operations and cyber kill-chain- Cybersecurity tactic development and employment- Cybersecurity root cause analysis and process improvement - Cyber threat and capability gap analyses

Led a small, high-performance team in developing “outside-the-box” solutions to complex & ambiguous problems to improve the security posture of an offensive cybersecurity organization. Drove organization to maximize mission effectiveness and meet strategic goals by serving as the collaborative “glue” to ensure that all groups remained aligned to organizational objectives. Unit's senior/lead operations planner. Developed, tested, and exercised cyber tactics to mitigate system technical limitations & operational deficiencies. Drove decision making by communicating operational risks and potential mitigations to Senior Leaders on a regular basis.

The US Air Force Weapons School is a five and a half month program charged with creating weapons officers that will return to the field to build, teach, and lead their respective community's operational force with the goal of increasing the unit's overall mission effectiveness. The program selects the top 0.7% of Air Force cyber operations officers and I was selected to be in the first class for the Cyber Warfare Operations program. Specifically for the Cyber Warfare Ops program, it teaches:- Critical Thinking and Critical Self Analysis (i.e. robust root cause analysis & process improvement) - Advanced Offensive and Defensive Cyber Tactics (tradecraft) - Operational and Tactical -level Planning- Integration with other Air Force Kinetic & Non-kinetic Weapon Systems- Joint Cyber Operations Planning and C2- Advanced Cyber Intelligence Processes and Operational Preparation of the Environment- Advanced Communication & Instructor SkillsNotable Achievements:- Academic Award- Best Cyber Paper Award (Titled: Mitigating Adversary Lateral Movement within Air Force Networks using HBSS)

This was such a fantastic and challenging job! My flight was the sole organization responsible for the development and documentation of offensive and defensive cyber tactics, techniques, and procedures (TTP) for the entire Air Force. This was also my first experience leading a large, diverse team of nearly 30 officers, enlisted, government civilians, and contractors. This job was the perfect technical leadership role, which allowed me to not only lead a technical team, but to have a significant hands-on role in the development and steering of tangible solutions to real-world, operational problems. During this time, I was also dual-hatted as the Chief of Weapons & Tactics for the 688th Cyberspace Wing.

I was a team lead responsible for searching for advanced persistent threats on the Air Force Enterprise Network (aka Hunter Operations or Defensive Counter Cyber). Specifically, I was in charge of the host-based detection team which focused on writing custom agents that would pull back key system information, logs, and suspicious files for analysis and correlation. Although my time in this organization was short, I gained an immense amount of hands-on experience with host-based intrusion detection and malware analysis. I also devised a more efficient "triage" process that used different types of agents during various stages of an operation that enabled our team to sweep through an enclave 25% faster without negatively impacting the quality of our results.

Wright-Patterson Afb, Oh, Us

This was my first assignment after earning my Master's Degree. Although this organization was not focused on R&D in cyber systems, I actively sought opportunities where my computer security background could bring a refreshing perspective. To that end, I mostly studied and applied artificial intelligence algorithms to various target recognition problem sets, primarily the minimization of false positives/negatives for network-based intrusion detection systems. During this job, I was selected to attend the Air Force's Undergraduate Network Warfare Training - the AF's 11-week pilot program to create a cyber operations training pipeline - where I was the #2 (of 24) graduate and received an award for outstanding academic achievement.

Bachelor Of Science Electrical Engineering, Digital Systems

Master Of Science Electrical Engineering, Vlsi And Secure Computer Architecture