Brandon McCrillis

Principal Consultant, Qualified Cyber

§01 Profile

Designation: Founder and Principal Consultant, Qualified Cyber
Experience: 20+ years · government, intelligence and private sector
Specialties: Offensive cyber operations · exploit development · M&A cyber due diligence · board advisory

§02 Government service · 10 years

U.S. Navy: Nine years · Cryptologic Technician (Networks) · one of a handful of Navy operators qualified at the journeyman level
Agencies: [redacted] [redacted] Agency · U.S. [redacted] Command · Department of the [redacted] · U.S. [redacted] Department
Roles: Senior [redacted] operator · target [redacted] analyst · cyber mission team lead
Scale: 1[redacted]+ operators trained and led · 10,[redacted]+ operations worldwide
Advisory: Presidential delegations on [redacted] [redacted] supply-chain risk · [redacted] cyber threats
Earlier: Joined as a cook · Enlisted Aide and naval aircrew for the Secretary of the Navy and the Chief of Naval Operations

§03 Private sector · 11 years

Rendition Infosec: Six years · senior consultant to CEO · led through acquisition
Results: Inc. 5000 three years running · revenue up sixfold · 50+ staff · 250 blue-chip clients · USD 15M+ in sales
Clients: Global banks and payment companies · government-sponsored enterprises · hospital systems and a national healthcare network · major law firms · Fortune 500 manufacturers · a sovereign government · U.S. and allied defense organizations
Casework: Breach emulation and advanced digital forensics for law enforcement and clients worldwide
Qualified Cyber: Five years · M&A cyber due diligence · offensive operations support · board cyber literacy
Network: A standing bench of senior specialists he has worked alongside for years · fielded as a team within hours when an engagement needs one · one NDA, one point of contact

§04 Instruction and media · 7 years

SANS Institute: Seven years teaching, 2017 to 2024 · five as SANS Certified Instructor for SEC660, advanced exploit development
Pilot faculty: All three pilot runs of U.S. [redacted] Command’s Joint Advanced Operator Course
Stages: Black Hat USA · ISACA · Army Cyber Institute at West Point · SANS events on four continents
Media: Fox News · Al Jazeera English · Tribe of Hackers: Red Team

§05 Honors and credentials

Awarded the Joint Service Commendation Medal, among other joint, Navy and national intelligence decorations, and the Director of [redacted] Excellence Award. SANS Certified Instructor, and GIAC certified in exploit research, intrusion analysis and threat intelligence (GXPN, GCIA, GCTI).

§06 Remarks

[redacted][redacted]

Subject has done the work, taught the class and written the course. Fields a team on short notice when the job needs one. Available for engagements worldwide.

› redactions applied at source · withheld material is not present in this document