About Me
Cybersecurity program manager and researcher with 10+ years of experience transforming complex security operations into scalable, efficient systems. I specialize in modernizing tools, reducing analyst friction, and delivering structured processes that strengthen threat intelligence, escalations, and SOC environments. My work focuses on measurable outcomes — faster response, clearer workflows, and more resilient organizations.
My Approach to Cybersecurity & Program Management
I began my cybersecurity career in hands-on operations, where I learned that the biggest improvements often come from fixing the hidden problems — the slow workflows, legacy tools, and unclear processes that make threat response harder than it needs to be.
As I moved into program management, that perspective shaped how I drive impact today: remove friction, standardize processes, and build systems that help teams protect customers faster and more confidently.
I enjoy solving the kinds of challenges that sit at the intersection of people, process, and technology. Whether partnering with engineers, legal teams, or frontline analysts, my goal is consistent: translate complex security needs into scalable solutions that improve efficiency, accuracy, and organizational resilience.
Experience
Microsoft — Senior Program Manager (2022 – 2025)
At Microsoft, I led programs that strengthened threat-intelligence workflows, improved analyst accuracy, and reduced manual effort across security reporting systems. I implemented automated CVE-tagging processes that cut manual classification time by 60–70%, improved consistency across hundreds of threat-intelligence articles, and created scalable automation models used by multiple teams. I also designed structured feedback analysis tools for the Microsoft Defender portal, enabling faster issue resolution and improving intelligence reliability for millions of customers. My work contributed to measurable improvements in content standardization, reduced reporting bias through an AI-driven evaluation framework (Hackathon Winner 2023), and increased operational clarity across security teams by modernizing internal communication systems. My work helped security teams deliver more accurate, timely intelligence while reducing manual workloads and improving customer trust.
RiskIQ — I3 Escalations Program Manager (2021 – 2022)
At RiskIQ, I was responsible for some of our most challenging cybersecurity escalations — cases involving impersonation attacks, fraudulent domains, BEC attempts, and other high-risk online threats. Much of the work centered on bringing order and clarity to situations that were already messy or time-sensitive. I refined how escalations were handled across web, mobile, and social channels, creating clearer expectations for analysts and more predictable outcomes for customers.
I also introduced performance metrics that helped the team spot delays earlier and resolve complex cases with greater consistency. A big part of the role involved partnering with Legal and Engineering to ensure the right mitigation path was taken, especially for DRP-related cases and our Executive Guardian Program. Through these efforts, I helped strengthen how sensitive incidents were managed and improved the overall trust customers placed in our response process.
LookingGlass Cyber Solutions — Manager, Cyber Security Center (2015 – 2021)
At LookingGlass, I led daily operations for a large cybersecurity center supporting hundreds of clients. My work focused on reducing friction in incident review and helping analysts work more efficiently. I oversaw the move from legacy tools to updated detection platforms, which improved accuracy and made investigations smoother.
I also streamlined workflows by automating routine steps, tightening review processes, and providing clearer training and expectations for the team. These efforts increased throughput, improved phishing response consistency, and gave analysts more confidence during fast-moving situations. I regularly partnered with threat intelligence vendors and brought in additional APIs that helped us remove threats more quickly.
LookingGlass was where I learned how much impact comes from fixing the small operational issues that add up, and from building systems that truly support the people doing the security work.
Core Competencies & Certifications
- Cybersecurity operations & threat-intelligence workflows
- Escalation management & incident handling
- Program leadership & cross-team coordination
- Automation, process design, & workflow optimization
- Platform modernization & tool migrations
- Analyst enablement, documentation, & training
- Multi-platform environments: Windows, macOS, Linux
Microsoft Aure AI Fundamentals • Microsoft Azure Fundamentals • CompTIA A+ • CompTIA Security+ • CompTIA CySA+
Contact
If you'd like to get in touch: hung@chenh.info