Securing the Flow: Tiered Cybersecurity Policy for U.S. Water Infrastructure
A tiered cybersecurity policy framework for U.S. water utilities, grounded in a red team exercise and three public incidents.
Mike Sosa
Security leader. Engineer. Builder.
I've been building things since I was 12. First it was houses, now it's security teams and the systems they protect.
For nearly seven years as a U.S. Army cyber officer, I've led teams across cyber defense, threat intelligence, and security engineering. I've run multi-year security programs and taught other professionals how adversaries think. Now I'm bringing that experience to industry.
- 7 yrs Army cyber leadership
- 30+ Largest team led
- 100+ Cyber professionals trained
- $1.1M+ Sales team revenue led
What I bring
-
Leadership
I've led cyber teams of 12 to 30+ people, built trust across organizations, and turned strategy into execution.
-
Security engineering
My hands-on work spans incident response, threat hunting, application security, and adversarial machine learning.
-
Teaching
I train cybersecurity professionals on adversary methodology and offensive and defensive strategy.
Featured work
View portfolioBreaking the Phishing Detector: Adversarial ML Research
Building ML phishing detectors, then attacking them to find where they break.
Latest from the blog
All posts-
A Floor, Not a Ceiling: Rethinking Cyber Rules for Small Water Utilities
What my Georgia Tech capstone taught me about why one-size-fits-all cyber rules fail small water utilities, and why a tiered approach that starts with a hard floor works better.
Let's talk.
Whether you're hiring, building a security team, or making the same move I am, I'd love to connect.
Get in touch