01
CDC · Center for Global Health
Ran incident response and managed encryption across 75+ countries through the Ebola crisis.
Kevin Stallard // Security since 1988
38 YEARS. 75 COUNTRIES. ZERO BULLSHIT.
Senior security executive. Incident response at the CDC through Ebola. Security architecture through Microsoft's $69B acquisition of Activision Blizzard.
The short version
I build it. Or I come in and clean it up when it's gone sideways. Thirty-eight years of it, from both sides of the table — the vendor's and the board's.— Kevin Stallard, on the record
0
Years in the field
0+
Countries, incident response
$0B
Acquisition secured
$0B
Card transactions, one afternoon
0
Studios under one architecture
0
First student-run web server
The receipts
Not a résumé.A track record.
Thirty-eight years, from one of the first intrusion detection systems ever shipped to a $69B acquisition. Drag through the short version.
02
Activision Blizzard → Microsoft
Owned security architecture across all 35 studios and 100,000+ endpoints through Microsoft's $69B acquisition — including what code could and couldn't cross into China.
03
EarthLink · Senior Abuse Engineer
Wrote the spam feedback loop years before the industry made it standard, and built the tooling that helped take down the "Spam King" and the "Buffalo Spammer."
04
U.S. Bank · Elavon
Protected $4B in card transactions in a single afternoon at Churchill Downs — and wrote the threat-hunting program at a $700B institution.
05
Internet Security Systems (IBM) · X-Force
Ran threat-signature delivery for RealSecure, one of the first intrusion detection systems ever shipped.
06
Georgia Tech · 1994
Stood up the first student-run web server — back when a question about the web meant emailing Tim Berners-Lee directly.
The full record — patents, the FBI call, the OCC examiners — is on the rap sheet.
Rooms I've been in
The company I've kept
Where to go next
Pick your rabbit hole.
01
Services
Fractional CISO, security architecture, incident response, and executive advisory.
Open the file → 02Security & Governance
Board-level governance, risk, and compliance. NIST CSF, ISO 27001, SOC 2, HIPAA, PCI DSS, CMMC.
Open the file → 03Stuff That Ships
Products built start to finish and put in front of real users. OSTRAQ, IQualify, eTrax, eCombine, and more.
Open the file → 04Mad Scientist Lab
The 2 A.M. experiments. Built because it sounded fun, or because nobody else had.
Open the file →Start the conversation
You don't call me
because everything's fine.
Maybe it's already on fire. Maybe you just don't trust the answers you're paying for. Either way, you'll be talking to me directly.