Tony Lee

Tony Lee

About

Detail

Vice President Operations
United States

Timeline

work
Job
school
Education

Résumé

Jobs verified_user 0% verified
  • HackerOne
    Vice President Operations
    HackerOne
    Apr 2026 - Current (5 months)
    Evolving AI-Native Customer and Community Operations to scale across Onboarding, TAM, Triage, Support, and Mediation Promoting efficiency and quality while supporting sustainable team health
  • Big Brothers Big Sisters of East Tennessee
    Board Member
    Big Brothers Big Sisters of East Tennessee
    Apr 2026 - Current (5 months)
  • Black Hat
    Review Board Member and Lab Manager, Black Hat Arsenal Lab
    Black Hat
    Apr 2019 - Current (7 years 5 months)
    Review topics, layout, hardware, schedule, and other logistics for Black Hat Arsenal Lab.
  • Amazon Web Services AWS
    Sr. Manager, Security Engineering
    Amazon Web Services AWS
    Apr 2022 - Apr 2026 (4 years 1 month)
    Offensive security Manager of Managers that supports teams solving difficult issues at unprecedented scale Utilizing data and metrics to build visibility and shift left key security initiatives Balancing risk-based priorities and resource availability for maximum gain
  • S
    Instructor/Speaker
    Speaking Engagements
    Mar 2021 - Mar 2022 (1 year 1 month)
    March 2022 - Virtual Healthcare & Pharma Summit February 2022 - FutureCon Eastern Cyber Security Conference December 2021 - Cyber Security Summit - Houston November 2021 - National Laboratories Information Technology Summit 2021 November 2021 - Secure World - Rockies November 2021 - OptivCon November 2021 - Cyber Security Summit - Boston November 2021 - CSO50 Conference November 2021 - Gartner Security & Risk Management Summit October 2021 - Cyber Security Summit - Los Angeles October 2021 - NASA Goddard Cybersecurity Day October 2021 - Cyber Security Summit - New York October 2021 - BlackBerry Security Summit 2021 October 2021 - Cyber Security Summit - Scottsdale October 2021 - Secure World - Texas October 2021 - Annual conference - Cyber
  • BlackBerry
    Vice President, Global Services Technical Operations
    BlackBerry
    Nov 2019 - Apr 2022 (2 years 6 months)
    Technical and delivery oversight for multiple business units to include: Incident Response (IR), Red Team, Strategic Services, PMO, DevOps, and Deployment & Integration People leader with technical skills to understand and solve issues from multi-disciplinary teams Reduce silos and build strong collaboration throughout consulting practice Responsible for multiple P&Ls balancing the realities of a profitable and sustainable PS practice
  • Cylance Inc
    Senior Technical Director
    Cylance Inc
    Jan 2017 - Nov 2019 (2 years 11 months)
    Regularly brief and interface with C-level executives Increase enterprise SOC visibility and strategy Improve endpoint security and vulnerability management Rapid prototype multiple internal and externally available tools Responsible for innovating tools and processes to save time and money Share knowledge through conference talks
  • MANDIANT
    Technical Director
    MANDIANT
    Jan 2014 - Jan 2017 (3 years 1 month)
    Red Team lead responsible for guiding offensive service line delivery. Assisted in merging of two companies and varied methodologies. Adopted best of breed tools and practices to ensure a high-level and consistent delivery.
  • FireEye
    Mad Scientist - Managing Principal Consultant
    FireEye
    Mar 2013 - Jan 2014 (11 months)
    Built a global consulting practice for startup company from ground up--helped grow the team to 75 people. Initially focused on product deployment and integration and eventually built out other service lines. - Red Team Service Line Lead – Responsible for maintaining and developing the network penetration service line methodologies - Assisted in pre-sales activities such as project scoping, pricing, and resource allocation - Mentored junior consultants and provided training to the practice - Conducted research on various malware and RATs
  • S
    Instructor/Speaker
    Speaking Engagements
    Jul 2010 - Feb 2020 (9 years 8 months)
    October 2020 - SecTor 2020 CyberSecurity Education Conference September 2020 - Australian Cyber Security Centre presentation - Chatbots September 2020 - BlackBerry Protect + ELK Stack Integration Webinar July 2020 - BlackBerry Protect + Splunk Integration Webinar January 2020 - FutureCon Atlanta, GA - Make your SOC smarter December 2019 - FutureCon Nashville, TN - Make your SOC smarter October 2019 - Splunk .conf 2019 - Power Up Your SOC August 2019 - Black Hat Arsenal USA 2019 - CyBot: Open-Source Threat Intelligence Chat Bot (Platform Enhanced) December 2018 - Black Hat Arsenal Europe 2018 - CyBot: Open-Source Threat Intelligence Chat Bot (Bring the Threats) August 2018 - Black Hat Arsenal USA 2018 - CyBot - Open Source Threat Intelligenc
  • F
    Principal Security Consulant
    Foundstone
    Jul 2009 - Mar 2013 (3 years 9 months)
    Delivered all service lines listed in skills and expertise section Assisted in pre-sales activities such as project scoping, pricing, and resource allocation Mentored junior consultants and provide training to the practice Lead instructor for the following classes: o Ultimate Hacking o Ultimate Hacking: Expert o Ultimate Hacking: Wireless o Ultimate Hacking: Web o Ultimate Hacking: Windows
Education verified_user 0% verified
  • The Johns Hopkins University
    Master of Science (M.S, Computer Engineering
    The Johns Hopkins University
    Jan 2007 - Jan 2008 (1 year 1 month)
  • Virginia Tech
    Bachelor of Science, Computer Engineering
    Virginia Tech
    Jan 2001 - Jan 2006 (5 years 1 month)
Publications verified_user 0% verified
  • T
    Tools
    Tools: UnBup - Extracts binary and metadata from McAfee BUP files https://github.com/OpenSecurityResearch/unbup xor.pl - Simple xor script that can be applied to encoded network traffic or binaries https://github.com/OpenSecurityResearch/unbup/blob/master/xor.pl
  • Sep
    Splunk Forensic Investigator App
    Sep
    The Forensic Investigator app is designed to be a Splunk toolkit for the first responder. Most tools do not need Internet access with the exception of a couple which use API calls. This Splunk app provides free tools for the forensic investigator which include, but are not limited to the following: - VirusTotal Lookup - URL Decoding - Base64 conversion - XOR conversion - HEX conversion - and more...
  • B
    Books, Newspapers, Magazines
    - Books: August 3, 2012 Hacking Exposed 7: Network Security Secrets and Solutions - Contributing Author McGraw Hill | ISBN-10: 0071780289 | ISBN-13: 978-0071780285 http://www.amazon.com/Hacking-Exposed-Network-Security-Solutions/dp/0071780289 -Interviews: October 26, 2016 Ransomware: The Next Big Automotive Cybersecurity Threat? http://blog.caranddriver.com/ransomware-the-next-big-automotive-cybersecurity-threat/ September 16, 2015 Cisco router 'SYNful Knock' compromise dissected by FireEye http://www.computing.co.uk/ctg/news/2426193/cisco-router-synful-knock-compromise-dissected-by-fireeye - Newspapers: Washington Post September 22nd, 2014 We know the password system is broken. So what’s next? www.washingtonpost.com/blogs/the-switch/wp/
  • A
    FireEye App for Splunk Enterprise v3
    Aug
    This is the latest Splunk App for FireEye designed to work with Splunk 6.x. Supported FireEye Appliances are: - Central Management System (CM) - Dashboards coming soon - Web Malware Protection System (NX) - Email Malware Protection System (EX) - Malware Analysis System (AX) - File Malware Protection System (FX) - Endpoint Threat Protection Platform (HX)
  • YouTube
    Videos and Presentations
    YouTube
    Jan 16, 2020 Controller Area Network (CAN) Big Data Analytics https://pages.cylance.com/en-us-2020-01-webinar-controller-area-network-big-data-analytics-recording.html May 26, 2016 Citrix Synergy 2016 - SYN322 - Security-hardening XenApp and XenDesktop https://www.youtube.com/watch?v=BkCUdJFiIs0 February 26, 2013 Demonstrating Detection Capabilities – Event Simulation http://www.youtube.com/watch?v=9RFzvvKXok0 February 26, 2013 Demonstrating Detection Capabilities – Detecting the Attack http://www.youtube.com/watch?v=cDhJ9y1QTZ4 January 31, 2013 Tracking the Hacker using McAfee ESM -- Event simulation and data population http://www.youtube.com/watch?v=wiHqZhNtuZw January 31, 2013 Tracking the Hacker using McAfee ESM -- Event correlati
  • W
    White Papers
    Jan 16, 2020 Controller Area Network (CAN) Big Data Analytics https://www.cylance.com/content/dam/cylance-web/en-us/resources/knowledge-center/resource-library/white-papers/LogBigDataAnalyticsWhitePaper.pdf March 16, 2016 System Hardening Guidance for XenApp and XenDesktop https://www.citrix.com/content/dam/citrix/en_us/documents/products-solutions/system-hardening-for-xenapp-and-xendesktop.pdf September 15, 2015 SYNFul Knock: A Cisco Implant https://www2.fireeye.com/rs/848-DID-242/images/rpt-synful-knock.pdf November 5, 2014 FireEye + Splunk: Intermediate Integration https://www.fireeye.com/content/dam/fireeye-www/global/en/partners/pdfs/FireEye%20Splunk%20Intermediate%20Guide.pdf May 1, 2014 FireEye + Splunk: Intro to Integration http
This is a community-created genome.