Jared M. Smith, PhD

Chief Scientist @ HUMAN Security (formerly WhiteOps + PerimeterX).

LP at Knoxville’s tech-centric VC firm: https://www.marketsquareventures.com/

CTO and Co-Founder of Uncat (https://uncat.com), a financial tech startup focused on solving the problem of receipt management, client communication, uncategorized expenses, income, and assets for accountants and their many clients. Built and managed the entire tech stack and product/support since 2019, serving 8,000 small businesses/day and growing.

Led a 13-member R&D group, TRACE (Threat Research and Active Collection of Exposures), responsible for global data collections on Internet vulnerabilities, network scan data, and novel threat intelligence for Recorded Future’s (now part of Mastercard) Attack Surface Intelligence product. Team members had expertise spanning software engineering, vulnerability research, and security engineering. – Hired and onboarded 3 new team members in the first 60 days of taking on the new role, successfully engraining them in our high performance but also inclusive and collaborative culture within both TRACE and Recorded Future. – Successfully integrated and led the attack surface data collection teams at both Recorded Future and partners within Mastercard working on broader integration efforts post-acquisition. – Helped my team modernize Recorded Future’s vulnerability intelligence data, formerly powered by outside sources, within the ASI product by enabling the team to combine modern LLM-capabilities with all Recorded Future data available to bring 200+ additional layers of context to every vulnerability (both CVE and non-CVE vulnerabilities/CWEs) in the ASI + TPI product. – Personally built and supported Recorded Future’s ServiceNow Vulnerability Response Attack Surface Intelligence integration second major version upgrade, including facilitating the onboarding of the largest ASI customer onto the new integration. – In the first quarter of being at Recorded Future, presented at the annual customer conference, PREDICT, in NYC in 2025 to 100 of our ASI users + prospects. Additionally, traveled to visit and support customers and colleagues in Japan, South Korea, and Sweden, as well as actively led multiple strategic on-sites with TRACE, Recorded Future teams, and Mastercard teams.

Technical leader + architect/engineer of cross-org (technology, product, sales, marketing) efforts to enhance, expand, and create new SecurityScorecard products, data + insights, and professional services. Shifted back to technical work after building out in-house threat research and insights team, hiring and managing the team of up to 7 researchers from Senior Staff to Senior level for nearly two years, and bringing SSC from 50% of our data bought externally to less than 1%.

Manager of the threat research team where we drive novel threat research at scale, working with other teams to enhance the core SSC platform, building and launching new internal and external products and initiatives, and helping steer the SSC response to cyber attacks affecting our global customer base. Within the team I additionally manage a sub-team of threat researchers supporting our public sector/policy/US government efforts. - Grew the team from 3 when I started as the manager to 7 currently, with all hires having 15-20 years of experience at places such as RiskIQ, Microsoft, the Canadian Intelligence community, Flashpoint, and BluVoyant. - Manage a team in 3 different countries and 4 timezones, working flexibly and rapidly to meet all OKR goals set out since Q3 FY21 when becoming the manager. - While leading the team, additionally served as tech lead and the senior architect/engineer/researcher for two new products at SecurityScorecard, 1) the Internal Security Suite, which integrates with 10+ and growing security vendor's products to bring inside-out data into the scorecard and connect with our outside-in visibility to link security issues at the edge to the incidents inside the network, and 2) Attack Surface Intelligence, our global scanning data put into a Shodan-esque platform and connected to threat context (including CVEs, Threat Actors, Certificate information 8B+ leaked credentials, and 1B requests per day to our malware sinkholes). Already sold 2M in deals before GA for ASI by helping take the product to market with my PM and PMM. - Led the response for and was quoted in industry news as the first risk management vendor to respond to Spring4Shell and Log4Shell in 2022 and late 2021. - Led my team in their partnership with Data Science to bring our Ransomware Analytic to market, which combines multiple measured signals from our collections platforms with labeled data from our Ransomware site crawlers to analyze an org's risk to Ransomware.

Individual contributor on the threat research team where we curate, collect, research novel signals that determine a company, vendor, organization, government, or utility’s cyber risk. - Built the first version of our refreshed Internet scanning platform, Horus, that scans 2000+ ports every 1.5 weeks on all 3.9 billion routable IPv4 addresses and collects terabytes of exposed host data every day. Allowed us to transition off our prior scan data providers and add 50+ new issues to the SSC Ratings platform in the first quarter it was live. - Built our in-house web crawler that crawls 13M domains every week using a full Chrome browser at scale, collecting request/response pairs, client-side library versions, full rendered HTML, screenshots, websocket data, and more. - Led the response to multiple 2021 global cyber incidents, including the Hafnium Microsoft Exchange exploitation at scale, the rapid growth in ransomware attacks against US critical infrastructure in Summer 2021, and the 21Nails Exim vulnerability disclosure.

Adjunct professor in the NYU-Tandon School of Engineering in the Computer Science and Engineering department. Teaching Pentesting and Vulnerability Research (graduate-level course in the NYU Cyber Fellows program) since Spring 2022.

Consulted the world's 2nd largest vehicle manufacturing company on their transition to being 100% data-driven in their production line and finance processes.

Courses Taught: - Introduction to Cybersecurity, Fall 2020

RP3 R&D Scientist and technical lead for over $6m in projects funded by the DOE, DHS, DOD, and IC agencies in the areas of cyber security (forensics, SCADA/ICS, cyber product evals, malware detection, security analytics, vehicle security, and other areas), adversarial machine learning, and data science. Led teams of 5-15, licensed several technologies to the private sector, and authored numerous proposals, publications, and patents.

As a Tennessee Graduate Fellow, I worked with Dr. Max Schuchard at the University of Tennessee Computer Security Laboratory (https://volsec.eecs.utk.edu) on novel computer and network security research. Main research areas: - Internet Infrastructure Security (primarily availability and confidentiality) - Internet Routing - Internet Measurement/Mapping Other areas of interest: - Cryptocurrencies - Cyber-Physical and SCADA/ICS security Presented research at the following venues: - 2017 Network and Distributed Systems Security Symposium (NDSS) in San Diego, CA - 2017 Cisco Offensive Summit in Knoxville, TN - 2017 ACM Conference on Computer and Communications Security (CCS) in Dallas, TX - 2018 Financial Cryptography and Data Security (FC) in Curaçao - 2018 IEEE Symposium on Security and Privacy (S&P/Oakland) in San Francisco, CA - 2019 CAIDA Active Internet Measurement Systems (AIMS) Workshop - 2020 Network and Distributed Systems Security Symposium (NDSS) in San Diego, CA