John Dwyer

Global Threat Assessment Lead, IBM X-Force Incident Response

John (@TactiKoolSec) is the Global Threat Assessment Lead for the IBM X-Force Incident Response team where he focuses on modeling adversary operations, developing threat detection methodologies, and advancing IR endpoint technology . In the recent years, John has focused his efforts on researching ransomware adversary operations and developing adversary simulation data to help drive improvements in the areas of incident response and threat hunting. Prior to joining X-Force John was a defensive cyber operations researcher helping the U.S. Army and U.S. Air Force improve incident response operations. John has spoken at multiple events including the SANS Threat Hunting Summits and Fulbright Commission Cybersecurity Exchange on threat hunting and ransomware operations.