SECURITY MANAGEMENT
CISM
Certified Information
Security Manager
MEET JESSEN
Technical depth.
Experience leading teams.
Cybersecurity leader, practitioner and author with 18+ years of experience across SOC leadership, detection engineering and AI-enabled cyber defense, including nearly 15 years at Microsoft.
PROFESSIONAL CERTIFICATIONS
Security leadership. Audit. AI governance.
INFORMATION SYSTEMS AUDIT
CISA
Certified Information
Systems Auditor
AI MANAGEMENT SYSTEMS
ISO 42001
Certified Lead
Implementer
AI MANAGEMENT SYSTEMS
ISO 42001
Certified Lead
Auditor
INFORMATION SECURITY
ISO 27001
Certified Lead
Implementer
Two separate ISO/IEC 42001:2023 certifications: Certified Lead Implementer and Certified Lead Auditor, issued by Global Skill Development Council (GSDC).
CAREER EXPERIENCE
Security operations at the core.
MICROSOFT · NEARLY 15 YEARS
From SOC investigations to detection engineering leadership
I spent most of my nearly 15 years at Microsoft in security operations center (SOC) environments, in both leadership and hands-on technical roles. My work included building, leading and mentoring a SOC team, responding to major breaches, investigating advanced threats and conducting digital forensic investigations.
As part of the founding team of the Microsoft Threat Intelligence Center (MSTIC), I tracked advanced persistent threats (APTs) and nation-state threat actors.
My Microsoft experience also included developing advanced detections for Microsoft Sentinel and Defender for Cloud, and later leading detection engineering in Microsoft Defender XDR.
I combined technical leadership with hands-on engineering, guiding detection and disruption capabilities from authoring and validation through tuning and release using DevOps and sprint-based delivery. I also conducted ISO/IEC 27001 audits.
Contributor to Microsoft’s Cyber Defense Operations Center strategy briefGLOBAL MSSP
Leading 24/7 security operations
Earlier in my career, I led a 15-person global MSSP analyst team, balancing investigations, escalation, service commitments and customer priorities.
CISCO · CONSULTING ENGAGEMENT
Security consulting for Cisco
After Microsoft, I delivered security work for Cisco through a consulting engagement.
PLATFORM EXPERIENCE
Experience across enterprise and MSSP environments
My work spans multiple SIEM and XDR platforms, informing how I approach detection coverage, investigations, automation and response across different environments.
SIEM: Microsoft Sentinel · Splunk · CrowdStrike Falcon Next-Gen SIEM · IBM QRadar · LogRhythm · ArcSight · OpenText Sentinel · EiQ Networks
XDR: Microsoft Defender XDR · Cisco XDR
IDENTITY · AUTOMATION · AI
Connecting technical capability with operational judgment
My broader experience includes Microsoft Entra ID, SIEM/SOAR automation and AI-enabled security operations. I bring that technical grounding to decisions about identity, detection coverage, investigation workflows and response readiness.
My AI security and governance work connects these operational questions with accountable ownership, testable controls and assurance evidence. My implementation and audit credentials cover establishing, operating and evaluating an AI management system.
Explore AI security and governance →
Member spotlightISACA Puget Sound Chapter · Fall 2026
From 24/7 security operations
to AI-agent accountability.
In the chapter’s Fall newsletter, I discuss my path into cybersecurity, why AI-agent authority deserves attention, and advice for people entering the profession.
“An inventory tells you what exists. It does not tell you what any of it was authorized to do.”
BOOKS & RESEARCH
Practical knowledge, shared.
FOR SECURITY TEAMS
The Defender’s Guide to AI Agents
What to log, detect, investigate, contain and govern when AI agents act on real systems.
Download free PDFPDF · 84 pages · Free · No email or signup required
FOR PARENTS & EDUCATORS
Smart Parent’s Guide to Cybersecurity
Practical digital-safety guidance that helps families protect children while building trust and sound judgment.
Read on Apple Books ↗Co-authored by Jessen Kurien · DevOM Publishing
LEADERSHIP BEYOND CYBERSECURITY
Built from one member to more than 42,000.
I founded and led a local community that grew to more than 42,000 neighbors, combining plain-language scam alerts with practical help for people in need. I later transitioned daily operations to a trusted team.
What building and handing over the community taught me
- Earn trust by being useful. People joined because the community offered value. Consistent help built the relationships that made larger efforts possible.
- Understand competing priorities. A “no” can reflect constraints or concerns I have not understood. Listening helps identify a practical next step.
- Delegate authority, not just tasks. If every routine decision still needs me, I need to revisit the expectations, authority or support I have provided.
- Stay steady and adapt. Accept feedback, correct mistakes and focus on the next useful action.
Members supported families experiencing hardship, provided food and clothing to people experiencing homelessness, reunited lost pets and created space for conversations about mental health. One issue raised by a member received local-news coverage.
I am no longer involved in daily administration. I continue to mentor young people, coach high school students on career development and speak about cybersecurity and digital safety.
Let’s connect.
Professional conversations, research, speaking and media.