Top Women in Cybersecurity: Mischel Kwon

Over a three-decade career in security, Mischel Kwon held a succession of increasingly highly-ranked technical leadership positions before founding MKACyber, a security consulting firm that assesses and builds security operations centers and runs a managed SOC service.

Mischel Kwon, President, MKA Cyber

Over a three-decade career in security, Mischel Kwon held a succession of increasingly highly-ranked technical leadership positions in both the public and private sector before hanging her own shingle in 2010 and founding MKACyber, a security consulting firm that assesses and builds security operations centers and runs a managed SOC service.

Prior to being made director of the U.S. Computer Emergency Readiness Team in 2008, she was the deputy CISO for the Department of Justice, in which job she built and deployed the Justice Security Operations Center to monitor and defend the department’s network against cyber threats. Kwon also worked as the vice president for public sector security solutions at RSA and ran the George Washington University Cyber Defense Lab.

MKACyber, a privately held 40-strong company, is “growing very rapidly,” Kwon says, “with both federal and commercial customers all over the country.”

Last year, she also founded the Cybersecurity Diversity Foundation, or CDF, a non-profit promoting workplace diversity in the field through scholarships and employment training programs. The board boasts such cyber luminaries as Tiffany Jones from iSight/FireEye and Bobbie Stempfley of MITRE. “We’re in fundraising mode right now” raising seed money and gathering corporate sponsorships, Kwon said of CDF.

What would you say to a young woman thinking about a career or starting out on a career in cybersecurity? 

Learn as much as you can learn and take every opportunity to gain new knowledge. Make sure you have the skills you need: No matter who you have to deal  with, being technically competent is a strength that it’s impossible to argue with.

Did any one person, event or idea inspire you to get into the cybersecurity field? What was it?

I had a long career in IT networking and development. What made the change [to the security field] possible was a CyberCorps Scholarship [for Service program award, that funds further education for federal employees]. I didn’t follow the normal career path. I didn’t get my [computer science master’s degree] ’til I was 40. Those degrees helped lift the glass ceiling for me.

In terms of a person, [former NSA Deputy Director] Mike Jacobs was a profound mentor for me. He helped guide me and advise me on what i should learn, who I should meet, and which direction I should take my career.

Why does diversity matter? Why is it important to empower women and minorities to work in cybersecurity and related fields?

It’s not just diversity, it’s more the inclusion of all diversity. It’s easy to gravitate towards people like yourself. It’s easy to agree with them. But that creates a more vanilla workforce that’s a lot less creative. Diverse teams are just better at what they do, if people are passionate, if they are committed. And it’s not just [diversity in] hiring, you have to help them learn and improve. You have to give them the room and the opportunity to grow. The field needs those diverse viewpoints and opinions and experiences at all levels.

Government

• FBI officials say AI is bolstering adversaries, emphasizing need to focus on cyber basics, patching

• Feds accuse China of ‘systematic’ distillation of U.S. AI models

• CIA’s Michael Ellis says cyber intelligence is changing how the agency operates

• The G7 tells industry to hurry up and prep for post-quantum encryption

Technology

• European parliament members call for slowdown of Serbia’s EU entry over spyware use

• FCC proposes public scorecard to rate telecoms on anti-robocall efforts

• Pegasus, NoviSpy variant spyware found on devices of Serbian activists

• Wyden seeks upgraded NSA security guidance on commercial VPN use

Threats

• Chinese espionage groups swarm to exploit triple-link chain of zero-days

• Microsoft discloses two actively exploited zero-days among 974 vulnerabilities

• Russian national extradited to US for alleged involvement in bank-account takeover scheme

• Attackers exploit zero-days in consistently besieged SonicWall product

Policy

• Whistleblower says USPS deploying new, ‘untested’ IT systems governing mail-in ballots

• ‘Watershed 250’ test program in Texas looks to private sector for water cybersecurity help

• Former sexual abuse victims say Grok used their images, videos to train deepfake capabilities

• Cyber threats nudge Trump to sign executive order on foreign equipment in U.S. energy infrastructure