Fractional CISO and keynote speaker. I've spent my career studying how cybercriminals actually operate, and I help boards, executives and security teams turn that into decisions they can act on.
Since 2024 I've worked independently as a security advisor and speaker, and I take on a limited number of clients at a time.
Lessons from a career in threat research, told for any audience. Virtual keynotes, podcasts and webinars anywhere, and in-person events with travel covered.
Senior security leadership without a full-time hire, delivered remotely.
For each case I bring in people I've worked with and trust, and I lead the work myself.
I was SecurityScorecard's first Chief Research Officer and spent more than a decade there as Chief Research & Development Officer and Research Fellow. I helped build the company's threat reconnaissance capabilities and security ratings platform as third-party risk became a must-have for insurers, procurement and risk teams.
Before that, I was a founding member of Prolexic's PLXSERT team, which dissected the itsoknoproblembro toolkit behind the 2012-13 DDoS campaign against major U.S. banks. Earlier I hunted vulnerabilities in web applications at Citi.
Since 2009 I've co-founded and led HackMiami, one of Florida's longest-running hacker communities, with an annual conference since 2013.
Keynotes, fractional CISO and board advisory, and investigations.
Annual HackMiami Hackers Conference since 2013, most recently HackMiami 1101 in May 2026. Featured in Rolling Stone's "The Geeks on the Front Lines."
First Chief Research Officer, later Chief Research & Development Officer, then VP & Fellow, Threat Research & Intelligence.
Analyzed the itsoknoproblembro (BroDoS) toolkit used in the #OpAbabil bank DDoS campaign. Presented at DEF CON 21 with the Prolexic team.
Web application security.
I've spoken at hacker conferences, industry events and webinars from Amsterdam to Colombia.
My work has appeared in Rolling Stone, Forbes, Business Insider, SC Media and Infosecurity Magazine.
For keynotes, fractional CISO work or investigations, email me directly. Based in the USA and working remotely with clients everywhere. Available to travel for in-person engagements when travel is covered.
[email protected]