Brian began his cybersecurity career in penetration testing before evolving into defensive security leadership roles focused on threat hunting, managed detection and response (MDR), and security engineering. At Presidio, he was one of the original designers of the company’s MDR service and helped develop Presidio’s threat framework, a collection of tested use cases built to identify and detect real-world adversary behavior. Previously serving as a Principal Security Architect and Principal Security Researcher, Brian led threat hunting, detection engineering, and vulnerability research initiatives while helping organizations strengthen their defenses through collaborative purple team operations. His hands-on work with tools such as Suricata, Zeek, Velociraptor, Volatility, Wireshark, Elastic, OSquery, and DeepBlueCLI directly informs the labs and methodologies students encounter in the courses he teaches.
Brian holds a Master of Science in Information Security Engineering (MSISE) from the SANS Technology Institute and maintains numerous industry certifications, including Certified Information Systems Security Professional (CISSP), Information Systems Security Architecture Professional (ISSAP), Certified Information Systems Auditor (CISA), Microsoft Certified Systems Engineer (MCSE), and 16 GIAC certifications, including the GDAT and GASAE certifications. Brian is also a faculty member of the SANS Technology Institute, which has been designated an NSA Center of Academic Excellence in Cyber Defense and is a multi-year winner of the National Cyber League competition.
In the classroom, Brian is known for translating complex detection and adversary-emulation concepts into practical workflows students can immediately apply in real environments. His teaching style emphasizes hands-on experimentation, operational realism, and the ability to think from both attacker and defender perspectives. Students leave his courses better prepared to build detections, automate security operations, and improve organizational resilience against advanced threats. Outside cybersecurity, Brian enjoys cycling and regularly spends time exploring scenic routes while staying physically active.
Qualifications Summary
- SANS Certified Instructor; Director of Engineering Advanced Security at Presidio
- One of the original designers of Presidio’s Managed Detection and Response (MDR) service and threat framework
- Part of the GIAC Advisory Board
- Holds a Master of Science in Information Security Engineering (MSISE) from the SANS Technology Institute
- Certifications: CISSP, ISSAP, CISA, MCSE, GASAE, GREM, GCPM, GXPN, GNFA, GCTI, GSTRT, GCWN, GPEN, GDAT, GCIA, GCFA, GDSA, GSEC, GCIH, and GCED
- Extensive experience in threat hunting, incident response, detection engineering, penetration testing, and purple team operations
