Looking for a job

Blake Smith

@blakesmith

Cybersecurity leader at WMATA leading threat intelligence, penetration testing, and Purple Team operations for critical infrastructure.

United States

Message

At Washington Metropolitan Area Transit Authority (WMATA), I lead Cyber Threat Intelligence, Penetration Testing, and Purple Team functions for a critical transportation infrastructure operator. I oversee cyber risk identification across digital and operational technology and lead PCI-DSS compliance and penetration testing.

I developed a formal CTI program and IOC management workflow integrated with Recorded Future, CrowdStrike, and ZeroFox. I also direct Purple Team operations and provide executive reporting on risk, program performance, and compliance.

At Capital One Financial Corp, I built and led five specialized teams and developed an enterprise threat landscape heat map that reduced analyst investigation time by 50%. I also designed a board-reported CSOC metrics product and advised executive decision-makers on cyber risk.

Experience

Work history, roles, and key accomplishments

Current

Senior Manager, Cyber Defensive Operations

Current

Washington Metropolitan Area Transit Authority

Apr 2024 - Present (2 years 5 months)

Lead cyber threat intelligence, penetration testing, and purple team functions for a critical transportation infrastructure operator. Oversee enterprise cyber risk identification, PCI-DSS compliance, and security program development across CSOC, operations, legal, and engineering stakeholders.

Threat Intelligence Penetration Testing Purple Team PCI DSS NIST CSF Risk Management Recorded Future Crowdstrike Zerofox HiddenLayer ServiceNow GRC Jira KRI KPI MIS Reporting Security Automation

Manager, Cyber Fusion

Capital One Financial Corp

Jul 2020 - Mar 2024 (3 years 8 months)

Provided enterprise-wide cyber risk intelligence and governance leadership for a major U.S. financial institution. Built and led five specialized teams, developed a threat landscape heat map that reduced analyst investigation time by 50%, and secured a $4M CSOC budget increase.

Cyber Risk Governance Team Leadership Threat Analysis KPI development SOP Development Fraud Prevention Data Integrity Executive Reporting Budget Management

Information System Security Officer

AT&T Government Solutions

Mar 2018 - Jul 2020 (2 years 4 months)

Managed GRC and risk management programs for classified government systems using NIST 800 series controls and MITRE ATT&CK. Developed System Security Plans and RMF documentation, achieving a 20% improvement in security compliance across 40+ systems.

GRC Risk Management NIST 800 53 RMF MITRE ATT&CK System Security Plans CONOPS Vulnerability Analysis Compliance Accreditation

IA Vulnerability Management Analyst

Northrop Grumman

Jul 2013 - Mar 2018 (4 years 8 months)

Progressive cybersecurity roles supporting national security programs at U.S. Cyber Command and Marine Corps Forces Cyberspace Command. Conducted vulnerability assessments, risk analysis, threat intelligence operations, and incident response across enterprise and classified environments.