Tony Lee
About
Detail
Vice President Operations
United States
Résumé
Jobs
verified_user
0% verified
Vice President OperationsHackerOneApr 2026 - Current (6 months)Evolving AI-Native Customer and Community Operations to scale across Onboarding, TAM, Triage, Support, and Mediation
Promoting efficiency and quality while supporting sustainable team health- Board MemberBig Brothers Big Sisters of East TennesseeApr 2026 - Current (6 months)
- Review Board Member and Lab Manager, Black Hat Arsenal LabBlack HatApr 2019 - Current (7 years 6 months)Review topics, layout, hardware, schedule, and other logistics for Black Hat Arsenal Lab.
- Sr. Manager, Security EngineeringAmazon Web Services AWSApr 2022 - Apr 2026 (4 years 1 month)Offensive security Manager of Managers that supports teams solving difficult issues at unprecedented scale
Utilizing data and metrics to build visibility and shift left key security initiatives
Balancing risk-based priorities and resource availability for maximum gain - SInstructor/SpeakerSpeaking EngagementsMar 2021 - Mar 2022 (1 year 1 month)March 2022 - Virtual Healthcare & Pharma Summit
February 2022 - FutureCon Eastern Cyber Security Conference
December 2021 - Cyber Security Summit - Houston
November 2021 - National Laboratories Information Technology Summit 2021
November 2021 - Secure World - Rockies
November 2021 - OptivCon
November 2021 - Cyber Security Summit - Boston
November 2021 - CSO50 Conference
November 2021 - Gartner Security & Risk Management Summit
October 2021 - Cyber Security Summit - Los Angeles
October 2021 - NASA Goddard Cybersecurity Day
October 2021 - Cyber Security Summit - New York
October 2021 - BlackBerry Security Summit 2021
October 2021 - Cyber Security Summit - Scottsdale
Octobe - Vice President, Global Services Technical OperationsBlackBerryNov 2019 - Apr 2022 (2 years 6 months)Technical and delivery oversight for multiple business units to include: Incident Response (IR), Red Team, Strategic Services, PMO, DevOps, and Deployment & Integration
People leader with technical skills to understand and solve issues from multi-disciplinary teams
Reduce silos and build strong collaboration throughout consulting practice
Responsible for multiple P&Ls balancing the realities of a profitable and sustainable PS practice - Senior Technical DirectorCylance IncJan 2017 - Nov 2019 (2 years 11 months)Regularly brief and interface with C-level executives
Increase enterprise SOC visibility and strategy
Improve endpoint security and vulnerability management
Rapid prototype multiple internal and externally available tools
Responsible for innovating tools and processes to save time and money
Share knowledge through conference talks - Technical DirectorMANDIANTJan 2014 - Jan 2017 (3 years 1 month)Red Team lead responsible for guiding offensive service line delivery. Assisted in merging of two companies and varied methodologies. Adopted best of breed tools and practices to ensure a high-level and consistent delivery.
- Mad Scientist - Managing Principal ConsultantFireEyeMar 2013 - Jan 2014 (11 months)Built a global consulting practice for startup company from ground up--helped grow the team to 75 people. Initially focused on product deployment and integration and eventually built out other service lines.
- Red Team Service Line Lead – Responsible for maintaining and developing the network penetration service line methodologies
- Assisted in pre-sales activities such as project scoping, pricing, and resource allocation
- Mentored junior consultants and provided training to the practice
- Conducted research on various malware and RATs - SInstructor/SpeakerSpeaking EngagementsJul 2010 - Feb 2020 (9 years 8 months)October 2020 - SecTor 2020 CyberSecurity Education Conference
September 2020 - Australian Cyber Security Centre presentation - Chatbots
September 2020 - BlackBerry Protect + ELK Stack Integration Webinar
July 2020 - BlackBerry Protect + Splunk Integration Webinar
January 2020 - FutureCon Atlanta, GA - Make your SOC smarter
December 2019 - FutureCon Nashville, TN - Make your SOC smarter
October 2019 - Splunk .conf 2019 - Power Up Your SOC
August 2019 - Black Hat Arsenal USA 2019 - CyBot: Open-Source Threat Intelligence Chat Bot (Platform Enhanced)
December 2018 - Black Hat Arsenal Europe 2018 - CyBot: Open-Source Threat Intelligence Chat Bot (Bring the Threats)
August 2018 - Black Hat Arsenal USA - FPrincipal Security ConsulantFoundstoneJul 2009 - Mar 2013 (3 years 9 months)Delivered all service lines listed in skills and expertise section
Assisted in pre-sales activities such as project scoping, pricing, and resource allocation
Mentored junior consultants and provide training to the practice
Lead instructor for the following classes:
o Ultimate Hacking
o Ultimate Hacking: Expert
o Ultimate Hacking: Wireless
o Ultimate Hacking: Web
o Ultimate Hacking: Windows
Education
verified_user
0% verified
- Master of Science (M.S, Computer EngineeringThe Johns Hopkins UniversityJan 2007 - Jan 2008 (1 year 1 month)
- Bachelor of Science, Computer EngineeringVirginia TechJan 2001 - Jan 2006 (5 years 1 month)
Publications
verified_user
0% verified
- TToolsTools:
UnBup - Extracts binary and metadata from McAfee BUP files
https://github.com/OpenSecurityResearch/unbup
xor.pl - Simple xor script that can be applied to encoded network traffic or binaries
https://github.com/OpenSecurityResearch/unbup/blob/master/xor.pl - Splunk Forensic Investigator AppSepThe Forensic Investigator app is designed to be a Splunk toolkit for the first responder. Most tools do not need Internet access with the exception of a couple which use API calls. This Splunk app provides free tools for the forensic investigator which include, but are not limited to the following:
- VirusTotal Lookup
- URL Decoding
- Base64 conversion
- XOR conversion
- HEX conversion
- and more... - BBooks, Newspapers, Magazines- Books:
August 3, 2012
Hacking Exposed 7: Network Security Secrets and Solutions - Contributing Author
McGraw Hill | ISBN-10: 0071780289 | ISBN-13: 978-0071780285
http://www.amazon.com/Hacking-Exposed-Network-Security-Solutions/dp/0071780289
-Interviews:
October 26, 2016
Ransomware: The Next Big Automotive Cybersecurity Threat?
http://blog.caranddriver.com/ransomware-the-next-big-automotive-cy - AFireEye App for Splunk Enterprise v3AugThis is the latest Splunk App for FireEye designed to work with Splunk 6.x.
Supported FireEye Appliances are:
- Central Management System (CM) - Dashboards coming soon
- Web Malware Protection System (NX)
- Email Malware Protection System (EX)
- Malware Analysis System (AX)
- File Malware Protection System (FX)
- Endpoint Threat Protection Platform (HX) - Videos and PresentationsYouTubeJan 16, 2020
Controller Area Network (CAN) Big Data Analytics
https://pages.cylance.com/en-us-2020-01-webinar-controller-area-network-big-data-analytics-recording.html
May 26, 2016
Citrix Synergy 2016 - SYN322 - Security-hardening XenApp and XenDesktop
https://www.youtube.com/watch?v=BkCUdJFiIs0
February 26, 2013
Demonstrating Detection Capabilities – Event Simulation - WWhite PapersJan 16, 2020
Controller Area Network (CAN) Big Data Analytics
https://www.cylance.com/content/dam/cylance-web/en-us/resources/knowledge-center/resource-library/white-papers/LogBigDataAnalyticsWhitePaper.pdf
March 16, 2016
System Hardening Guidance for XenApp and XenDesktop
https://www.citrix.com/content/dam