About Us

Cyber Fire staff has been fighting the bad guys since before 2009. Our programs give you direct access to people with skills, experience, and a passion for teaching.

Administrative Team

Company team

Neale Pickett

Cyber Fire Lead
Los Alamos National Laboratory

Neale worked from 1997-2010 as an incident responder at Los Alamos National Laboratory. After developing the field of Network Archaeology in 2008, he has been called to investigate multiple high-profile events across the US Federal Government. He began Cyber Fire as a means to teach others his techniques, and now manages execution of the expanded program.


Company team

Grace Herrera

Cyber Fire Deputy Lead
Los Alamos National Laboratory

Grace was a student in the 2017 Cyber Fire Summer School, and has quickly risen to a leadership role in Cyber Fire. She oversees execution of Cyber Fire events and handles most of the growth opportunities for the program.

Company team

Evan Sanchez

Protocol Coordinator
Los Alamos National Laboratory

 

Company team

Chris Rawlings

Cyber Fire Simulation Lead
Los Alamos National Laboratory

Chris is a cyber security research and development scientist at Los Alamos National Laboratory. He helped develop and teaches the Host Forensics class at Cyber Fire Foundry and Cyber Fire Summer School. He also runs the Cyber Fire Simulation events.

Company team

Gillian Hsieh Ratliff

Technical Project Manager
Los Alamos National Laboratory

 

Core Instructors

Company team

Neale Pickett (LANL)

Network Archaeology

Neale is the Cyber Fire lead, and also the lead instructor for the Network Archaeology class. He invented many of the tools and techniques taught in this class as part of various high-profile investigations, beginning in 2009.

Company team

Chris Rawlings (LANL)

Host Forensics 

Chris is the lead for Simulation events, and also the lead instructor for the Host Forensics class. Chris actively works with LANL legal counsel on forensic investigations for legal cases.

Company team

Lauren Pearce (LANL)

Malware Analysis

Lauren is an incident responder on the Computer Security Incident Response Team (CSIRT) at Los Alamos National Laboratory. Although a capable generalist, she specializes in malware analysis.  She developed and teaches the Malware Analysis class at Cyber Foundry.

Company team

Daniel Noyes (INL)

Operational Technology

 Daniel Noyes is an instructor for the operational technology class. He is project manager for energy threats at Idaho National Laboratory and has experience in many aspects of cyber security for critical infrastructure. 

Company team

Kelcey Tietjen (SNL)

Incident Coordination

Kelcey leads the Incident Coordination class. He has been an active incident responder and forensicator since 2004. Kelcey has built, managed, or worked in incident response capabilities at Mandiant, Apple, Bechtel, and LANL. He currently manages a cybersecurity research group at SNL which focuses on developing tools and capabilities for incident responders.

 

Company team

Aaron Pope (LANL)

Entry Point

Aaron leads the Entry Point class and assists with the Simulation events. He is a researcher at LANL whose work lies at the intersection of cybersecurity, machine learning, and graph theory.

Company team

J. Patrick Avery, Jr. (LANL)

Entry Point

Patrick is a co-creator of the Simulation events. He assists with Network Archaeology and back-end maintenance of the Cyber Fire compute infrastructure. He has worked some very high-profile incidents, furthering the field of Network Archaeology with countless software and technique improvements.

Company team

Bill Clark (LANL)

Incident Coordination


Company team

Chris Pavan (LANL)

Host Forensics

 

Subject Matter Experts

Company team

John Donaldson (LLNL)

John is a cybersecurity researcher and threat hunter at LLNL. He is a main developer on the Cyber Fire back-end server software, and has contributed a great deal to puzzle sets. He is an assistant instructor of the Network Archaeology class, and conducts numerous cybersecurity educational outreach efforts at LLNL.

Company team

James Wernicke (LANL)

James specializes in web and mobile security, working primarily in mobile computing and location-based app development to make progress in crowd-sourced security measures and nuclear detection.  He runs the Los Alamos CoderDojo, an after-school programming club for elementary school students.