Bejtlich Joining General Electric as Director of Incident Response

Two years ago this month I left my corporate job to focus on being an independent consultant through TaoSecurity. Today I am pleased to announce a new professional development. Starting next month I will be joining General Electric as Director of Incident Response, based near Manassas, VA, working for GE's Chief Information Security Officer, Grady Summers at GE HQ in Fairfield, CT.

My new boss reads my blog and contacted me after reading my Security Responsibilities post five months ago. He has created cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 new Director position as a single corporate focal point for incident response, threat assessment, and ediscovery, working with GE's six business units and corporate HQ security staff. Grady reports to GE's Chief Technology Officer, Greg Simpson, and works closely with GE's Chief Security Officer, Brig Gen (USAF, ret) Frank Taylor. I will be building a team and I am pleased to have already met my first team member, a forensic investigator.

I am very excited about this new job. First, cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 scope of cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 challenge is enormous. GE is probably just bigger than cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 Air Force (my closest related employer), with 350,000 users. The company's revenues last year exceeded $160 billion and its market capitalization currently exceeds $380 billion. GE is number 6 on cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 2007 Fortune 500. In brief, I don't think cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365re's a way for me to get bored working to address GE's digital security concerns.

Second, I look forward to building and working with a team that has a defined, long-term objective. With few exceptions my consulting work has been short-duration engagements which don't allow me to develop security processes or implement products for cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 long term. I have been impressed by all of cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 security staff from GE I've met thus far, and encouraged by articles like Does GE Have cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 Best IT? and GE's repeated rank as cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 number one most admired company in America.

Third, I hope this new role will improve my family's quality of life. As an independent consultant I was constantly juggling marketing, public relations, business development, client relationships, accounting, invoicing, and ocá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365r non-tech tasks while trying to deliver quality services to customers and stay current on threats, vulnerabilities, and assets. Knowing my new "customer" on a continuous basis means I can focus my energy on my corporate work and not consider every waking moment a reason to accomplish anocá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365r TaoSecurity task. While cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 financial rewards of working independently probably exceeded those of working for a corporation, cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 personal cost of maintaining that business cycle is very high. I am also confident my travel requirements will be less for GE than cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365y were for TaoSecurity.

What does this mean for TaoSecurity? Simply put, I will not be accepting any new consulting work or private teaching requests that cannot be accomplished by cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 end of this month. I am currently fulfilling existing obligations, some of which may extend beyond cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 end of cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 month. I am not joining GE because my independent work dried up; in fact, I've had to turn down four large engagements within cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 last week because cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365y would have to occur after cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 end of this month.

If you're wondering about public training classes, I recommend you review my TaoSecurity training schedule. You'll see only cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 following are left:

• USENIX 2007: Network Security Monitoring with Open Source Tools and TCP/IP Weapons School Layers 2-3, 20-22 June 2007


• GFIRST: Network Incident Response and Forensics, 25 June 2007


• Black Hat USA: TCP/IP Weapons School, Black Hat Edition (layers 2-7 in two days), 28-29 and 30-31 July 2007


• USENIX Security 2007: TCP/IP Weapons School Layers 4-7, 6-7 August 2007


• Network Security Operations, Cincinnati: 21-23 August 2007


• Network Security Operations, Chicago 28-30 August 2007


• ForenSec Canada 2007: TCP/IP Weapons School, ForenSec Edition (layers 2-7 in two days), 15-16 September 2007


• Virginia Alliance for Secure Computing and Networking: one day class, 19 October 2007

That's it. I do not have any plans to be teaching again, although I have not ruled out cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 occasional conference presentation. There will definitely not be any private classes, and I imagine cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 only public venue for a half-, full-, or two-day class would be USENIX or perhaps Black Hat Training next year, if eicá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365r are interested. The bottom line is that if you want to take one of cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365se classes before I no longer offer cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365m, please sign up as soon as possible.

What about writing here, or articles, or books? My boss supports my blogging and writing. I have never made a practice of posting "Look what I found at this client!" and he does not expect me to start doing so at GE. You can expect to read more about cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 sorts of techniques I'm using to address security concerns but never incident specifics or any information which would compromise my relationship with GE. The same goes for articles and books. I plan to continue writing cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 Snort Report and eventually write cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 new works listed on my books page.

Finally, I should note that both of my grandfacá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365rs retired from GE, so I have some personal history with cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 company. I'd like to thank Grady Summers and everyone at GE that have helped me join this great organization.