John Swanson Email & Phone Number

Maryland, United States

San Francisco, CA, US

Serving as a strategic advisor to the Chief Security Officer/SVP of Engineering and Deputy CSO to provide accountable planning and leadership for critical company-wide initiatives.

San Francisco, CA, US

• Serving as a strategic advisor to the Chief Security Officer/SVP of Engineering and providing accountable planning and leadership for critical company-wide initiatives.
• Led GitHub's global preparation for and response to the war in Ukraine, ensuring the safety of employees, readying the business to respond to revenue implications and trade compliance obligations, and coordinating.
• Developed and initiated a multi-year plan to bring 2FA to millions of developers using GitHub.com.
• Conceptualized and initiated a variety of strategic risk reduction programs in response to a major security incident including traditional security control improvements and product security improvements.
• Mentored and advised senior and developing technical and people leaders across the company.

San Francisco, CA, US

• Growing and maturing a compliant corporate security, incident response, threat detection, and threat intelligence team at web scale.
• Planned and executed a significant reorganization of detection, response, intelligence, and corporate security functions including the establishment of a Product Security Incident Response Team (PSIRT).
• Provided interim leadership support for GitHub Security and assisted GitHub's search for and onboarding of a permanent security executive.
• Coordinated response to and communications for a security incident resulting in the termination of all active user sessions on GitHub.com.
• Represented GitHub before US Federal Regulators.

San Francisco, CA, US

• Building and leading a compliant incident response, threat detection, and threat intelligence team at web scale.
• Scaled GitHub's incident response and threat detection team by a factor of four.
• Coordinated significant web scale incident response including cross-company events with Microsoft.
• Planned and executed a seamless organization-wide deployment of FIDO/WebAuthn MFA.

San Francisco, CA, US

• Developed a sustainable, SOC2 and FedRAMP-Tailored compliant detection and response program.
• Led detection and response related functions through a significant period of company growth and acquisition.
• Provided company-wide coordination for large scale security incidents including executive communications and risk assessment.

San Francisco, CA, US

• Coordinated large-scale platform abuse and security incident response activity.
• Managed a multi-million dollar logging infrastructure overhaul to support detection and site operations.
• Developed a sustainable incident post-mortem analysis framework.

Salisbury, Maryland, US

• Principal information security SME and leader; responsible for the design, operation, and/or oversight of all information security systems.
• Provides planning and guidance for all information security initiatives.
• Researches current TTPs and designs effective countermeasures in partnership with operational staff.
• Incident response leader and advisor.
• Risk assessment, vulnerability analysis, SIEM.

Salisbury, Maryland, US

• Serving as the primary network security administrator; responsible for both the design and operation of critical network and security systems.
• Information Security
• Network and Security Architecture and Design
• Network Security Administration and Event Monitoring

Salisbury, Maryland, US

Salisbury, Maryland, US

Salisbury, Maryland, US

Msit, Information Assurance

Ba, Political Science, Minor In History