Jon Tran is an expert cyber practitioner who assists organizations with strategic and technical cybersecurity implementations as a Virtual CISO.
Jon leverages his technical proficiency to design and execute exercise scenarios that ensure a realistic and impactful tabletop experience. As a cross-functional professional, he has successfully bridged the gap between retail fraud and cybersecurity through his contributions to a major trade association’s fraud taxonomy.
Prior to joining Chertoff Group Jon served in the Marine Corps for thirteen years and is a still a reservist for Marine Forces Cyber Command. He began his career as a Sysadmin specializing in Cisco, Microsoft, Tenable and other technologies that make up an organization’s IT infrastructure. He then moved to Information Assurance where he assessed organizations against NIST and CIS Standards, wrote Marine Corps cyber policy and provided Cyber vulnerability and risk management for senior leaders.
In his most recent position, he led a team of Marines and civilians specializing in active threat hunting, incident response, audits, assessments and generalized cyber related incidents. This is the same function he is engaged in today in the Reserves. These various roles provided Jon the ability to communicate complicated technical topics in an understandable manner to C-suite level leaders. Through his hands-on experience Jon provides a complete risk and threat picture that considers all parts of the organization.
Certifications
- Certified Information Systems Security Professional (CISSP)
- GIAC Certified Enterprise Defender (GCED)
- GIAC Certified Incident Handler (GCIH)
- GIAC Certified Detection Analyst (GCDA)
- GIAC Security Leadership (GSLC)
- GIAC Strategic Planning, Policy, and Leadership (GSTRT)
- Cisco Certified Network Associate (CCNA)
- CompTIA Security+ (Sec+)
- CompTIA A+
- Certified Ethical Hacker (CEH)
- Defense and Counter Infiltration (US CYBERCOM Certified)
- Intermediate Cyber Core (US CYBERCOM Certified)
- USCC JQR Senior Compliant Core (US CYBERCOM Certified)
- CMMC Registered Practitioner (RP)
- MITRE ATT&CK SOC Assessment Certification
Education
MS Cybersecurity Studies
BS Information Systems Security
Area of Expertise
- Threat Assessment and Mitigations
- Proactive Threat Hunting
- Incident Response Operations
- Defensive and Offensive Cyber Operations
- Policy Writing and Development
