Mark Bristow

Mark’s path into ICS security began early. He discovered his first ICS vulnerability at just 10 years old and has since built a career at the forefront of national cyber defense. He has led and supported incident response efforts tied to major global events, including the attack on the Ukrainian power grid, the SolarWinds supply chain compromise, and nation-state attempts to access the U.S. power grid. Prior to MITRE, he served at the Cybersecurity and Infrastructure Security Agency (CISA), where he held multiple leadership roles including Branch Chief for Cyber Defense Coordination and Director of the Hunt and Incident Response Team (HIRT), as well as Incident Response Chief for ICS-CERT. These experiences directly shape his course, where students learn how adversaries target ICS environments and how to build defenses grounded in real operational scenarios.

Mark’s contributions extend beyond operations into national strategy and capability development. As the founding director of MITRE’s Cyber Infrastructure Protection Innovation Center (CIPIC), he helped establish advanced capabilities that now support cyber-physical security missions across government and industry. He is also a faculty member of the SANS Technology Institute, an NSA-designated Center of Academic Excellence in Cyber Defense. A frequent international speaker, Mark shares insights on ICS security, incident response, and defending critical infrastructure with audiences around the world.

In the classroom, Mark emphasizes practical, experience-driven learning rooted in how real adversaries operate. He focuses on helping students understand not just what to do, but why it works in complex, real-world environments. Known for connecting technical concepts to operational impact, he creates an environment where students can confidently apply what they learn immediately. Outside of cybersecurity, Mark enjoys spending time with his family, flying as a private pilot, and scuba diving, pursuits that reflect the same discipline and curiosity he brings to his work and teaching.