Fractional CISO and keynote speaker. I've spent my career studying how cybercriminals actually operate, and I help boards, executives and security teams turn that into decisions they can act on.
Since 2024 I've worked independently as a security advisor and speaker, and I take on a limited number of clients at a time.
Lessons from a career in threat research, told for any audience. Virtual keynotes, podcasts and webinars anywhere, and in-person events with travel covered.
Senior security leadership without a full-time hire, delivered remotely.
For each case I bring in people I've worked with and trust, and I lead the work myself.
From 2013 to 2024 I was at SecurityScorecard, first as its Chief Research Officer and later as VP & Fellow, Threat Research & Intelligence. I helped build the company's threat reconnaissance capabilities and security ratings platform as third-party risk became a must-have for insurers, procurement and risk teams.
Before that, I was a founding member of Prolexic's PLXSERT team, which dissected the itsoknoproblembro toolkit behind the 2012-13 DDoS campaign against major U.S. banks. Earlier I hunted vulnerabilities in web applications at Citi.
Since 2009 I've co-founded and led HackMiami, a hacker community with an annual conference since 2013.
I was also a founding member of John McAfee's Hacker Advisory Board (2016), alongside Chris Roberts and Bryce "YTCracker" Case.
Keynotes, fractional CISO and board advisory, and investigations.
Annual HackMiami Hackers Conference since 2013, most recently HackMiami 1101 in May 2026. Featured in Rolling Stone's "The Geeks on the Front Lines."
Chief Research Officer, later VP & Fellow, Threat Research & Intelligence.
Analyzed the itsoknoproblembro (BroDoS) toolkit used in the #OpAbabil bank DDoS campaign.
Web application security.
I've spoken at hacker conferences, industry events, webinars and podcasts, from DEFCON and HOPE to ISC2 Security Congress.
My work has appeared in MIT Technology Review, Rolling Stone, Forbes, Business Insider and Infosecurity Magazine.
For keynotes, fractional CISO work or investigations, email me directly. Based in the United States and working remotely with clients everywhere. Available to travel for in-person engagements when travel is covered.
alex@alexheid.com