The people who scope the work are the people who do it
Senior practitioners. You deal directly with the people doing the work.
Offensive security and red team engineer with roughly fifteen years in the field, now working as a principal AI red team engineer. He has run red team operations at BILL, Verisign, and Cylance, and came up through malware analysis and incident response at Cylance, The Media Trust, and ThreatTrack — the discipline of taking a system apart to find how it fails before an adversary does. A regular conference speaker, his recent talks cover AI-assisted red teaming and email-authentication testing.
Technical product management leader with more than twenty years building secure SaaS products, much of it in data privacy and security. At Spirion he built the technical product management practice from the ground up and helped take the company from a single on-premise product to a multi-product SaaS portfolio; earlier, at GFI Software, he ran technical product and support across a large security-software line. He has co-founded a startup, consulted across the technology, security, medical, energy, and financial sectors, and served as a Signal Systems specialist in the Army National Guard, including a deployment in support of Operation Iraqi Freedom. He leads cross-functional agile teams from concept to launch using Kanban, Scrum, and SAFe.
Twenty-one years in information technology, more than fifteen of them in security. Ten of those as Chief Information Security Officer of a regulated financial institution, where he built the security program across governance, risk, compliance and operations, virtualized the estate into a replicated data center, ran the disaster recovery site, led state and federal examinations, and reported risk to the board. Earlier work covered malware incident response and forensic remediation, and security engineering on a cyber threat intelligence platform deployed across federal and financial-sector critical infrastructure — in an environment requiring extensive background investigation and supervised access to classified programs. He founded Graystone in 2013 and today writes the code as well as the policy.
Full-lifecycle mercenary with an accelerated healing factor and decades of field experience, most of it survived. He specializes in high-velocity conflict resolution, dual-katana incident response, and regeneration under adverse conditions — the discipline of taking a threat apart and walking away from the pieces. His background spans the Weapon X program, freelance work across several dimensions, and an ongoing relationship with Death. Fluent in most languages and every firearm, he is also fully aware that he is a placeholder, and would like his real-world counterpart to send in an actual bio before this one ships.
Doctor of Education, with two decades across classroom teaching, reading remediation, curriculum alignment, school administration, and university-level teacher preparation. She has published peer-reviewed research on media literacy in teacher education. At Graystone she leads the values-based training and behavioral frameworks applied to every model the firm builds. How a system reasons, what it declines, and how it responds under pressure are curriculum problems before they are engineering problems, and they are treated here as a discipline rather than a policy page.