☁️ Trey Ford

Chief Strategy & Trust Officer

Bugcrowd

Jul 2025 - Current (1 year 1 month)

Leading public policy and research advocacy, partnering across the organization on long term growth, corporate development, operational integrity, and organizational trust.

CISO, Americas

Bugcrowd

Oct 2024 - Aug 2025 (11 months)

Advisory Committee

Center for Cybersecurity Policy and Law

Sep 2024 - Current (1 year 11 months)

The Hacking Policy Council aims to make technology safer and more transparent by facilitating best practices for vulnerability disclosure and management, as well as empowering good faith security research, penetration testing, and independent repair for security. Key goals of the Hacking Policy Council - Create a more favorable legal environment for vulnerability management and disclosure, bug bounties, AI red teaming, good faith security research, and pentesting; - Grow collaboration between the security, business, and policymaking communities; - Prevent new legal restrictions on security research, pentesting, AI red teaming, or vulnerability disclosure and management; and - Strengthen organizations’ resilience through effective adoption

Strategic Advisor

Deepwatch

Aug 2024 - Mar 2025 (8 months)

Transitioned from CISO to Strategic Advisor.

Advisory Council Member

Momentum Cyber

Jul 2024 - Current (2 years 1 month)

Momentum Cyber is the only investment banking firm focused exclusively on the Cybersecurity sector.

[SVP] CISO - Chief Information Security Officer

Deepwatch

Mar 2024 - Aug 2024 (6 months)

Trey's principal charter is serving and protecting Deepwatch, his teams oversee Information Security and Information Technology for the company. Trey also serves as 'customer zero' - the first consumer of technology, products, and services from Deepwatch. This unique seat enables thought partnership with security leaders at the world's most cherished companies - partnering with and advocating for Customer needs in Deepwatch's products and services.

Cybersecurity Masters Program - Guest Lecturer

The University of Texas at Austin

Mar 2023 - Current (3 years 5 months)

Executive Director, Deputy CISO

Vista Equity Partners

Jul 2021 - Oct 2023 (2 years 4 months)

VP, Strategy and Trust

Salesforce

May 2019 - Jul 2021 (2 years 3 months)

- Product Management leadership of the one-platform vision and Heroku integration programs. - Standardized agile methodologies alignment to a singular, central feature and planning platform. - Re-architected the broader Salesforce strategy for usage and contractual framing of third-party public cloud infrastructure. Implemented a quorum-based root of trust and access provisioning process. - Heroku was left autonomous at Salesforce for 6 years post acquisition. Led the integration of legal contract structures, business systems, security services, and coverage with the core Salesforce organization – effectively finishing the M&A process. Intimately appreciate the strengths, weaknesses, and key challenges of both centralized and de-centralized

VP Security, Heroku CISO

Salesforce

Jun 2016 - May 2019 (3 years)

- Organized the security program around a quantitative risk model, driving priority and investment decision making. Process and measurement improve difficult decisions. - Partnered and engaged expediently across an impossibly distributed and matrixed organization with an autonomous and later functionalized security organization. - Formalized the Heroku abuse execution, strategy, and programmatic design. Bad folks use good technology – the process of managing that is often complex. It can be made simpler.

Chief Information Security Officer (CISO)

Heroku

Jun 2016 - May 2019 (3 years)

Built a security program for one of the highest-leverage technology platforms on the internet - Heroku literally runs other people’s code: hosting applications and powering websites, whether Fortune 500 companies, startups, students, or miscreants. The initial charter was to organize Site Reliability Engineering (SRE) and Security, driving process maturity, third party compliance validation, and accelerate the customer trust journey. The role expanded into the core Heroku executive leadership team, driving strategy, security, go to market, feature priority- including legal, privacy, and contractual oversight. • Established a culture around engineering enablement and service for internal customers. Security is not a place of ownership as muc

I

North American Advisory Board

ISC

Feb 2014 - Jan 2019 (5 years)

Advisory Board

Black Hat

Jan 2014 - Current (12 years 7 months)

Global Security Strategist

Rapid

Jan 2014 - Mar 2016 (2 years 3 months)

Technical subject matter expert, spokesperson and thought leader providing guidance for government, corporate executives, and customers to internal sales, marketing, and product management. Exited via IPO. - Company spokesperson. Took stage publicly representing Rapid7, in some forums as an industry emissary in briefings and keynotes at major events, via proposed/selected and invited events. - Delivered rapid media response and insight to reporters (print, online, global, regional, and industry trade) on breaking news. Built content for community responding to trends. - Provided legislative support, including briefings and hands-on trainings (USSS, NSA, DHS, WH-NSC, DoJ, etc), member and staffer meetings, position statements, legislative pr

Advisory Board

Bugcrowd

Dec 2013 - Oct 2024 (10 years 11 months)

General Manager

Black Hat

Mar 2012 - Jan 2014 (1 year 11 months)

Produced the premier cybersecurity event series. Led every aspect of design, organization, and execution in a matrixed and global organization for Black Hat USA, Europe and Abu Dhabi. - Safely and successfully planned, negotiated, and executed 20+ events in 6 countries including Executive Summits, Briefings, Trainings and partner events- including multi-agency dignitary protection. - By the numbers, my team of twelve was dedicated to Black Hat events, onsite USA event production team included over 80 personnel and 100 volunteers, representing the second largest security conference and arguably the most professional conference in the world. - Chaired the 22-seat board of InfoSec industry leaders, responsible for recruiting, scoring, and pro

Manager, Security Response

zynga

Oct 2010 - Mar 2012 (1 year 6 months)

Technical subject matter expert, spokesperson and thought leader providing guidance for government, corporate executives, and customers to internal sales, marketing, and product management. Exited via IPO. - Company spokesperson. Took stage publicly representing Rapid7, in some forums as an industry emissary in briefings and keynotes at major events, via proposed/selected and invited events. - Delivered rapid media response and insight to reporters (print, online, global, regional, and industry trade) on breaking news. Built content for community responding to trends. - Provided legislative support, including briefings and hands-on trainings (USSS, NSA, DHS, WH-NSC, DoJ, etc), member and staffer meetings, position statements, legislative pr

Product Manager, SaaS

McAfee

Oct 2009 - Oct 2010 (1 year 1 month)

Managed CSIRT, Forensics, Abuse, and eCrime teams (~25 people). In that time Zynga doubled employee count, expanded internationally as Amazon’s top EC2 user. Kept the software juggernaut unblocked.

Director of Solutions Architecture

WhiteHat Dynamic by Synopsys

Nov 2007 - Oct 2009 (2 years)

GM of McAfee SECURE vulnerability management platform for the SaaS business unit. As the first product manager over this business, there was no shortage of opportunity for growth and maturity with a global team of 75+ in marketing, sales and development.

Director of Strategic Solutions

FishNet Security

Apr 2004 - Nov 2007 (3 years 8 months)

Empowered GTM, messaging, sales, and competitive positioning. Designed, built, and deployed a financial model calculator helping customer understand financial cost structures for enterprise-level vulnerability management and application security strategies.

E

Founder, CTO

Eclectix LLC

Jul 2002 - Jan 2006 (3 years 7 months)

About

Detail

Timeline

Résumé