Conducting cybersecurity research, mentorship, and education at the Georgia Institute of Technology. Teaching: cyber threat intelligence, national and international cyber policy and response, national security and intelligence, cyber threat attribution, incident response, detection engineering and threat hunting, intrusion analysis, cybersecurity communication, graduate research practicum, and other courses.

Teaching Cyber Threat Attribution and Response and Masters Practicum.

Founder and President at the Threat Intelligence Academy establishing a new cybersecurity community built around practitioners to make cyber defense achievable.

The Global Emancipation Network is a non-governmental organization and non-profit employing cutting-edge data analytics to disrupt human trafficking operations, embark on effective rescue campaigns, inform domestic and international policy, and restore the victims of modern-day slavery to dignity.Sergio directs a team of world-class volunteer computer and data scientists development platforms and services leveraging analytics across large-scale data lakes to identify human traffickers, their operations pipelines, and victims at an unprecedented scale. This unique application of data and computer science to human rights enables global law enforcement interdiction and victim recovery while also informing policy makers with evidence-based insight into the human trafficking epidemic.

Deliver the world’s best industrial control system (ICS) threat intelligence striving to improve ICS defense through knowledge and analytics while disrupting threats to critical infrastructure. Dragos is an industrial (OT/ICS/IIoT) cybersecurity company on a mission to safeguard civilization.

Works with a world-class team of adversary hunters to discover, track, and disrupt threats to industrial control systems. Manages the world's only dedicated industrial control threat intelligence product, Dragos WorldView, providing timely insight into threats to industrial control networks (ICS) and equipment.

Led Microsoft's cross-company threat intelligence practices uniting, strengthening, and enhancing Microsoft's ability to identify and respond to threats across all products and services. He coordinated threat detection and response across 12 separate business units and several security operations centers enabling Microsoft to respond and remediate threats faster. Integrated several internal and external threat intelligence feeds and built processes of automated threat detection. These practices and techniques of utilizing threat intelligence across global platforms and enabling cross-enterprise security were incorporated into Microsoft's Advanced Threat Protection products in Windows, Office 365, and Azure providing unparalleled threat protection for billions of customers.His team found and tracked over 100 cyber threat groups and was involved in the first coordinated commercial sector disruption of nation-state activity. He worked alongside Microsoft Security Response Center to support the prioritization of every zero-day vulnerability in Microsoft products helping to identify whether the vulnerability was being exploited in the wild, by whom, and for what purpose. This work enabled Microsoft to make more effective decisions around patch engineering and customer support.He led several cross-industry collaboration efforts to ensure that information security was not a silo within any company enabling greater security across the entire internet. These works enabled threat mitigation at scales never done previously touching literally every internet user in the world.He was recognized as contributing to over $50 million in revenue in 2016.

One of NSA’s first dedicated threat intelligence analysts and founding member of the NSA/CSS Threat Operations Center (NTOC) responsible for finding, tracking, and countering the world’s most sophisticated cyber threats. Discovered dozens of significant international cyber threats. Produced and delivered timely intelligence to technical systems and national decision-makers including directly to US Presidents, Cabinet Secretaries, Members of Congress, and various military leaders. Further integrated this intelligence into several national-level cyber threat mitigations, operations, and response strategies.A co-author of the first US National Intelligence Estimate on cyber threats and hundreds of subsequent briefings to all levels of US and international governments providing the catalyst to making cybersecurity a key element of national security.Led multiple globally distributed analytic teams of hundreds of analysts discovering and countering the most advanced cyber threats while developing new intelligence sources.Crafted the foremost US Government cyber threat intelligence model, The Diamond Model, significantly increasing analytic efficiency, accuracy, and effectiveness across the world.Designed and developed core analytic tools and platforms, including the NSA’s premier cyber threat intelligence knowledge base.Created the DoD threat intelligence and intrusion analysis curriculum and delivered it personally to over 3000 students worldwide receiving the prestigious National Cryptologic School’s Adjunct Faculty of the Year award.

Responsible for researching and recommending solutions for an intrusion detection system in a VPN supporting 200+ users. Research included network sensors, host based sensors, databases, front-ends, counter-defense, and analysis engines from both a commercial and open source perspective. Conducted evaluations and testing of multiple platforms and vendor solutions. Created an installation and deployed a 13+ sensor distributed network intrusion detection system across all NASA field offices, which included centralized management and analysis.

Member of the development team for, at the time, the largest server-side Java project developing a nationally distributed child care referral system. Duties included QA and testing, database management, and engineering and developing a mission-critical portion of the application. Other duties included developing their job-search database and other java-based customer support systems.