Michael Y. Email & Phone Number

London, Gb

London, United Kingdom

CTIPs is a sub-committee of CREST that is responsible for the development of the CTI industry and career development of Cyber Threat Intelligence Professionals. My role involves providing current insights from the wider industry (particularly from the consumer side) and thought leadership which includes authoring the paper "CTI in a Business Context" https://www.crest-approved.org/wp-content/uploads/2022/04/CTI-in-Business-Context_2021.pdf

Targeted Attacks Analysis (TAA) Team Lead responsible for managing intelligence collection, analysis and reporting efforts on targeted attacks.Responsibilities include:- Directing and managing intelligence collection, analysis and reporting on advanced threat groups.- Law enforcement partnership technical lead.- Business development including regional development and sales support.- Systems and tools direction and development to streamline research workflow.- Technical threat intelligence research.- Intelligence research community outreach.

Responsible for building a global threat intelligence function to provide support for our Incident Response work as well as serving the needs of the wider Cyber Resilience business unit.Key achievements:- Managed and delivered revenue generating threat intelligence propositions that were aligned with the firm’s client base and the strategy of the overall business practice.- Successfully positioned threat intelligence as the core integration unit for the cyber practice, bringing together other business units including penetration testing, incident response and consulting services. - Successfully integrated threat intelligence into incident response engagements by providing value-added services including indicators enrichment, malware analysis, threat actor attribution and wider contextual intelligence.- Built up trusted intelligence sharing network with researchers, law enforcement agencies and think tanks to expand intelligence capabilities.

London, England

Key achievements:- Led, managed and delivered the threat intelligence component of intelligence-led penetration testing engagements. This includes successfully pitching and delivering an engagement to a European central bank.- Led, managed and delivered other threat intelligence engagements (e.g. bespoke client research).- Published technical research on cyber threat activities through malware analysis and command & control network infrastructure enumeration: http://pwc.blogs.com/cyber_security_updates/michael-yip/ - Led and managed research and development projects on creating new OSINT and dark web collection capabilities.- Worked with PwC Global and UK SOC as well as the PwC threat detection and incident response services team to provide threat intelligence support for external and internal incident response engagements.- Delivered malware analysis and threat intelligence training to junior members of the team as well as member firms.

Malvern

- Advanced Persistent Threat (APT) analysis and threat landscape assessment- Open source intelligence (OSINT)- Information leakage and social media risk- Web forum mining

Southampton, United Kingdom

Part of a 5-person online social network startup company with over 13,000 users, my role involved developing new funcitonalities on the web portal, designing strategic solutions to boost network growth (e.g. user interface design), fund raising and data mining. Successfully raised seed funding for the company after a successful pitch to a visiting VC.

Reporting directly to E-Commerce Manager, I was responsible for various in-house projects to support business development in the Asia-Pacific region. Typical projects include interface design and data mining. Languages used include HTML, JavaScript, PHP, Perl and MySQL.Retained as a part time web designer/developer after a successful spell as a summer intern.