Security Startup Analyst publishing analysis in DarkReading, CSO Online, and eWeek, covering RSAC’s startup competition, Innovation Sandbox. Helped introduce the industry to cloud security, enterprise browsers, and SecDevOps over the past few 8 years. Currently focused on MLSecOps and all things AI security.Host the Genealogy of Cybersecurity, discussing early growth startup technologies with entrepreneurs, CISOs, and investors. A holder of press credentials and a member of the Investigative Reporters and Editors (IRE). A bibliography is available at https://muckrack.com/paul-shomo.

System engineering and consulting around cloud security, SASE, next-gen data security platforms, and endpoint DLP.

Associate Editor for the ACM’s academic journal, Digital Threats Research and Practice. We are currently working on the "Future of Forensics" issue. This open journal has a double-blind peer review process and enables collaboration between academic researchers and cybersecurity industry practitioners.

Solution selling of the XDR stack: Bricata NDR, Devo SIEM, EnCase EDR, DFIR, and insider threat. Turning deep expertise into concise explanations, tailored demos, and the shepherding of proofs-of-concept. Top SC in elite Western US Region. Azure/AWS familiarity. Able to relate products to our new cloud, automation, AppSec, and identity-centric world.A technical mentor and team player with a positive attitude who can work with difficult account executives. Adjustable volume knob ranges from qualifying and actively selling value with brand-new sales reps, down to a speak-only-when-spoken-to mode. Ran cybersecurity user groups, and headlined sales events, conference talks, and webinars.

Technical pre-sales, demos, and sales enablement for inbound resell. Locate emerging cybersecurity tech to license and resell as OEMs or white labels under the EnCase brand. Contract negotiation, connector requirements, product marketing, and pricing. Technologies included malware analysis, emulated sandbox, User and Entity Behavioral Analytics (UEBA), threat intelligence, and SOAR. Oversaw a partner ecosystem that hosted 30 vendors at its 2017 summit. Due diligence for M&A watch list. Member of Global Strategy Team for Security, 2015-2017. Widely quoted as the official EnCase media spokesperson, 2015-2018.

Oversee large partner ecosystem which hosted 30 security vendors at its 2017 technology partner summit. Perform technical development support for product integrations. Coordinated go-to-market activities and partner messaging for integrations. Assigned special projects such as prototyping SaaS cybersecurity offering. As part of security strategy team, scouted emerging technologies and closed multiple OEM and white label deals to license technology. Performed due diligence on two M&A targets. Managed CalTech grant studying applications of AI & machine learning in security. Resurrected Guidance security services by white labeling Outlier Security’s agentless cloud product as the basis of a Threat Assessment service. Acted as marketer, solution consultant and sales trainer of the service.

Longtime architecture committee member. Member of the new product R&D team that launched the industry’s first incident response solution that became Gartner’s #1 market share leader in Endpoint Detection and Response (EDR). Spent years architecting and managing security, forensics and eDiscovery product development. Managed as many as 3 teams of 15 developers. Achieved a record 100% personnel retention for 5 years . At different times owned Endpoint Security, Sweep Enterprise/Case Analyzer (apps inside EnCase Investigator) and the Portable product. Acting engineering Product Manager, drove requirements for periods of years while absent marketing Product Managers. Ran software developer recruitment and training program for professional services. This 8 year program was highly successful at training 20 new graduates for 6 month periods, and then firing them off to bill customers for custom code and integrations. Many of them are still with Guidance and some have advanced into management.

New product and customer research, writing of requirements and guiding of development. Acted as product spokesperson and developed strategies to battle competitors for product awards.

Ran professional services company, providing outsourced development of firmware for network routers and switches. Managed 3 employees and a small office. C/C++, protocol stacks and device driver development on Linux, VxWorks and pSOS. Clients included Wind River Systems, Intel, Marvell Semiconductor, Inn Technologies.

Projects: * Delivered firmware for 6 enterprise class Ethernet switch and/or IP router devices. * Ported new BSD TCP/IP stack to VxWorks RTOS. * Ported VxWorks to embedded MIPS hardware. Driver Development: Ethernet cards, L2/L3 switching ASIC's and network processors, flash, low level file system/driver interaction. Platforms included GalNet, IXP1200, MIPS, PPC, Pentium and StrongArm. Technologies: C, C++, assembler, UNIX, VxWorks, Tornado, HTML, embedded web server, multi-tasking/threading, ClearCase, TCP/IP, STP, VLAN, link aggregation, IGMP snooping, OSPF, RIP, SNMP, RMON and FAT32.

Projects:* Developed C++ libraries for interfacing devices and for network communications. * Developed wireless signal acquisition station. * Ported Network Time Protocol (NTP) stack to VxWorks.Technologies: C++, C, UML, Rational Rose, Linux, VxWorks, real-time software techniques, multi-tasking/threading, CVS, RPC, CORBA, embedded web server, device drivers for digital receiver, A\D, GPS, fiber channel PCI card and SCSI.

Projects: Developed LEO satellite simulator providing RF to satellite modems. Developed remotely accessed LEO satellite network sniffer.Technologies: C++, VC++, MFC, Visual Studio, C, UNIX, make, VxWorks, DOS, Informix, SQL, socket programming, Verilog Geode, SDL and Source Safe.