Robert is a recognized authority in the industrial cybersecurity community. He is CEO and co-founder of Dragos, a global technology leader in cybersecurity for industrial controls systems (ICS)/operational technology (OT) environments.
In addition, Robert serves on the Department of Energy’s Electricity Advisory Committee as the Vice Chair of the Department of Energy’s Grid Resilience for National Security Subcommittee, and is a member of the World Economic Forum’s subcommittees on Cyber Resilience for the Oil & Gas and Electricity communities.
Robert is routinely sought after for advice and input on cybersecurity for industrial infrastructure and is regularly asked to brief national leaders. He testified to the U.S. House of Representatives Committee on Energy and Commerce–Subcommittee on Oversight and Investigations and to the U.S. Senate Energy and Natural Resources Committee to advise on policy issues related to critical infrastructure cyber threats. He has also presented at the World Economic Forum Annual Meeting in Davos and industry-leading conferences such as RSA, SANS, BlackHat, and DefCon on the topic of industrial cybersecurity and threats. He serves on the board of the National Cryptologic Foundation.
Robert began his pioneering work in ICS/OT cybersecurity as a U.S. Air Force Cyber Warfare Operations Officer tasked to the National Security Agency, where he built a first-of-its-kind mission identifying and analysing national threats to industrial infrastructure. He went on to build the industrial community’s first dedicated monitoring and incident response class at the SANS Institute (ICS515) and the industry-recognized cyber threat intelligence course (FOR578). Today, he is a SANS Fellow.
Full Name
Heath Moodie
Job Title
Intel
Speaker Bio
Heath Moodie is a Senior ICS Threat Researcher and the first concierge analyst for the APAC region. Heath has specialised in the Cyber Threat Intelligence(CTI) capability for a number of years in the private sector through different roles post a career in the military.
Heath now specialises in helping OT organisations operationalise and understand the value of OT Intelligence. He is passionate about safeguarding civilisation with an intelligence lead decision making process for critical infrastructure and OT asset owners. With Heath leading an intelligence lead approach to decision making for OT, organisations can understand, prioritise, assess and deter their Most Likely and Most Dangerous courses of action as it pertains to threats specific to the OT/ICS networks within Asia Pacific.
Full Name
Phil Tonkin
Job Title
Field Chief Technology Officer
Speaker Bio
Phil Tonkin is the Field Chief Technology Officer at Dragos. Before this, he held the position of Chief of Staff as the company’s top strategic advisor to the CEO, Robert M. Lee.
Prior to joining Dragos, he was the Global Head of Security for National Grid, responsible for establishing and implementing the National Grid OT Cybersecurity Program. He has worked in the energy sector for 23 years, working in roles in electricity transmission, distribution and generation, gas transmission, distribution and storage, and IT.
At Dragos, Phil has worked extensively to support electric sector companies in uplifting their OT cybersecurity posture. Phil is a founding member of the Systems of Cyber Resilience in Electricity group at the World Economic Forum (WEF).
Full Name
Julian Gutmanis
Job Title
Threat Detection Technical Lead
Speaker Bio
Julian is a Threat Detection Technical Lead. He has over 10 years of experience in industrial control system security in various specialties, including bespoke hardware security analysis, penetration testing and red-teaming, incident response, threat hunting, security engineering and governance. He has experience working in various geographical regions, including Asia-Pacific, North America, Europe and the Middle East.
Before joining Dragos, Julian held a position as an Expatriate OT Security Engineer in Saudi Arabia, where he was involved in security engineering and analysis activities for an extensive oil and gas portfolio. In this position, Julian was a lead analyst in investigating an unexpected plant shutdown that led to the detection of the TRISIS malware. The malware was responsible for multiple shutdowns at a major petrochemical refinery and presented an unprecedented threat to health and safety. Dragos now actively tracks the group responsible for the compromise under the handle Xenotime.
Julian has also held management positions overseeing attack and penetration teams in Australia and has contracted with major energy utilities in the United States.
Full Name
Logan Carpenter
Job Title
Vuln guy
Speaker Bio
Logan Carpenter, a CISSP-certified Principal Vulnerability Analyst at Dragos, brings over seven years of expertise in the field of ICS/OT security. Proud to be an HBCU graduate from Norfolk State University, Logan also serves as a board member for the Information Assurance Research Education and Development Institute at his alma mater. He furthered his education with a Master of Computer Science from the renowned Georgia Institute of Technology.
Logan has held notable positions at premier U.S. federal research laboratories, including Sandia National Laboratories, where he specialized in ICS/OT network and firmware emulation, and the Georgia Tech Research Institute, contributing to their Embedded Cyber Techniques program. Since joining Dragos, Logan has been a key contributor to Dragos World View and the Dragos Year In Review. He also played a pivotal role as one of the lead analysts for the PIPEDREAM malware.
Logan is a vital member of Dragos' intelligence research team. He dedicates his time to analyzing the latest vulnerabilities and reverse engineering industrial control equipment, hunting for zero-day vulnerabilities.
Full Name
Conor McLaren
Job Title
International Intel Analysis Practice Lead
Speaker Bio
Conor McLaren is the International Intel Analysis Practice Lead at Dragos, where he focuses on enhancing the value of the intelligence service offering and guides an incredibly talented team of intel analysts in the APAC region. Conor also specialises in the research and analysis of a plethora of adversarial threat activity relevant to ICS/OT organisations in the APAC region. Conor has an immense passion for threat intelligence due to its profound impact on shaping business decisions, organisational security strategy and aiding frontline defenders.
Before joining Dragos, Conor worked as a cybersecurity professional in a diverse range of sectors, including resources, fast-moving consumer goods, government, technology, and consulting. Most recently, Conor was a Senior Threat Response Analyst at Crowdstrike's OverWatch Elite team, performing sector-specific and hypothesis-driven threat hunts for a range of global organisations.
Conor possesses an unwavering commitment to developing innovative solutions to adapt to the ever-changing threat landscape and ensuring the protection and forewarning of our nation's most critical assets.
Full Name
Nicholas Tangey
Job Title
Principal Industrial Threat Hunter
Speaker Bio
Nicholas Tangey is a Principal Industrial Hunter at the industrial cybersecurity company Dragos, Inc., where he primarily focuses on enabling and providing detection, threat hunting, and response services within the OT Watch managed service to monitor and safeguard industrial client environments through threat hunting, security assessments, and IR services.
Before joining Dragos, Nicholas served for six years in the Royal Australian Navy as a Cyber Warfare Specialist, where he worked in several different areas, including Incident Response, Threat Hunting, Threat Emulation and Capability development. During this time, he built, maintained, and operated tools, equipment, and systems to support and enable critical operations, including in the OT/ICS Security space.
Full Name
Rowan Macfarlane
Job Title
Principal Industrial Consultant
Speaker Bio
Rowan Macfarlane is a Principal Industrial Consultant at the industrial cybersecurity company Dragos, where he performs architectural assessments, network vulnerability assessments, compromise assessments, tabletop exercises and a range of other customer-facing activities.
Rowan has over 15 years of experience in OT cyber security, having worked in both operations and consulting. During this time, Rowan has:
Commissioned and operated two LNG plants
Helped define and build operational OT support teams
Led design and implementation of a ‘zones and conduits’ network architecture
Designed and built OT management zones, monitoring, and secure remote access systems
Built OT risk management and assurance practices
Performed technical penetration tests for various industries in the Asia Pacific region.