Hayden Evans

Product Engineer

Las Vegas, Nevada, United States10 yrs 11 mos experience
Highly Stable

Key Highlights

  • Featured in the Wall Street Journal for cybersecurity research.
  • Contributed to the MITRE ATT&CK framework.
  • Advised Fortune 500 CISOs on threat intelligence.
Stackforce AI infers this person is a Cybersecurity Expert specializing in Threat Intelligence and Incident Response.

Contact

Skills

Core Skills

Cyber Threat Intelligence (cti)Vulnerability AnalysisIncident Response

Other Skills

Threat ReportingAdversary ResearchMalware AnalysisThreat TriageVulnerability AssessmentVulnerability ScanningIndustrial ControlPenetration TestingReverse EngineeringReport WritingCybersecurityPython (Programming Language)LinuxWordPress

About

I’m a cybersecurity professional with 4+ years of experience in Threat Intelligence, Incident Response, and Security Operations, currently serving as a Senior Threat Intelligence Analyst at Crowdstrike. My research has been featured in the Wall Street Journal, and I’ve contributed to the MITRE ATT&CK framework (Copy-Paste Execution: T1204.004, Conditional Access Policy Discovery via brute forcing: T1110, and COM/Typelib Hijacking: 1546.015). I specialize in novel threat discovery and vulnerability analysis, including reporting on emerging campaigns such as the ClickFix execution campaign, the SocGholish Python infection chain, and a new typelib hijacking technique, as well as co-authoring the analysis of the SAP NetWeaver 0-day to advise on exploit methodology. I regularly collaborate with law enforcement and advise CISOs of Fortune 500 companies, providing threat briefings, intelligence-driven guidance, and proactive recommendations to reduce exposure and improve defenses.

Experience

10 yrs 11 mos
Total Experience
3 yrs 6 mos
Average Tenure
3 mos
Current Experience

Crowdstrike

Senior Intelligence Analyst

Jan 2026Present · 3 mos · Remote

Reliaquest

3 roles

Threat Intelligence Analyst

Oct 2023Jan 2026 · 2 yrs 3 mos

  • Conduct adversary research and attribution, tracking attacker TTPs, monitoring dark-web ecosystems, and analyzing malware campaigns to inform enterprise defenses.
  • Perform vulnerability analysis and advisory work, reviewing critical CVEs, assessing impact on customers, and providing proactive mitigation and detection guidance.
  • Produce intelligence deliverables, including threat reports, executive briefings, and actionable recommendations for CISOs, SOC teams, and law enforcement partners.
Cyber Threat Intelligence (CTI)Vulnerability AnalysisThreat ReportingAdversary ResearchMalware Analysis

SOC Analyst Tier 1 Senior

Promoted

Aug 2022Oct 2023 · 1 yr 2 mos

  • Conduct ad hoc investigations and malware analysis to determine the scope of incidents and implement remediation actions.
  • Escalate active hands-on-keyboard intrusions to the breach response team and support full investigation efforts.
  • Mentor and train analysts on effective investigation techniques, tool usage, and threat triage methodologies.

SOC Analyst

Feb 2022Aug 2022 · 6 mos

  • Triage alerts to determine true vs. false positives and perform remediation across incidents including phishing, malware, ransomware, lateral movement, and exploitation events.
  • Collaborate with detection engineering to improve detection coverage, submit new rules, and enhance MITRE ATT&CK mapping fidelity.
  • Performed investigative forecasting to map the complete attack chain used by adversaries, identifying techniques and lateral movement.

Universal urethane

IT Support Specialist, Web Admin

Aug 2020Feb 2022 · 1 yr 6 mos · Las Vegas, Nevada, United States

  • Managed and maintained the company’s e-commerce website, performing security updates, traffic monitoring, and performance optimization, while training staff on new customer-facing processes.
  • Coordinated with hosting providers to prevent and remediate malicious attacks and ensure secure website operations.
  • Provided IT support including network troubleshooting, phishing analysis, software/hardware installation, and issue resolution for the organization.

Exotics racing

Racing Instructor

Dec 2014Mar 2020 · 5 yrs 3 mos · Las Vegas, Nevada

  • - Demonstrated and instructed advanced track driving techniques through in-car sessions, ensuring all clients mastered high-performance skills in a controlled environment.

Education

University of Arizona

Bachelor of Applied Science - BASc (108 Credits) — Cyber Operations: Defense & Forensics

Jan 2020Present

University of Arizona

Certificate — Digital Forensics

College of Southern Nevada

Associate’s Degree

Jan 2014Jun 2017

Stackforce found 100+ more professionals with Cyber Threat Intelligence (cti) & Vulnerability Analysis

Explore similar profiles based on matching skills and experience