Director of Threat Operations
Ben leads a team of analysts in performing active defense inside of ICS/SCADA networks. In this capacity he is responsible for performing a threat hunting, incident response, and malware analysis mission for the industrial community. Ben has served in various roles including both planner and player roles in GridEx I, II, and III. He served as a member of the NERC Cyber Attack Task Force, contributor to NIST SP 800-150, NBISE Advanced Defender panel member, and adviser on CI Advanced Defender Training program. Ben is an accomplished speaker including SANS, ICSWJG, ShmooCon and other venues. He was recognized by SANS as a 2017 Difference Maker Award Winner for his contributions to the electricity sector.