THE PRACTICE · TENURE & EXPERTISE

Six analysts. Forty seven years of intelligence.

Recruited from CISA, GCHQ, the CIA, NCSC, and a handful of newsrooms. Vetted, peer-reviewed, accountable.

047 YEARS COMBINED
012 PRIOR POSTINGS
031 PUBLICATIONS
03 CONTINENTS
Portrait of Marwa Okonkwo
01

Marwa Okonkwo

Director · Threat Intelligence

Twelve years tracking nation-state operations across the EMEA region. Prior posting at the UK National Cyber Security Centre. Author of the 2024 "Persistence Without Privilege" framework now adopted by three NATO member CERTs.

Prior Postings

  • UK NCSC · Operations Lead
  • Mandiant · Senior Researcher
Nation-State OperationsEMEA AdversariesTradecraft Modeling
Read profile
Portrait of Ezra Tannenbaum
02

Ezra Tannenbaum

Principal · Strategic Advisory

Former senior advisor to two Fortune 50 boards on cybersecurity governance. Eighteen years across federal civilian roles, including a tour at CISA. Specialty: translating technical findings into board-ready strategic counsel.

Prior Postings

  • CISA · Senior Advisor
  • Fortune 50 BoD · Cybersecurity Counsel
Board GovernanceStrategic RiskFederal Coordination
Read profile
Portrait of Haruka Pendleton
03

Haruka Pendleton

Lead · Adversary Profiling

Decade in counterintelligence at the CIA before joining the private sector. Built the adversary profiling methodology now used by the firm. Reads operational telemetry the way most people read newspapers.

Prior Postings

  • CIA · Counterintelligence Center
  • FireEye · Targeted Threats
CounterintelligenceAdversary BehaviorOPSEC Analysis
Read profile
Portrait of Rafael Quintero
04

Rafael Quintero

Director · Geopolitical Risk

Foreign-correspondent background, then a decade at the Council on Foreign Relations covering cyber-statecraft. Now leads SCRYER’s integration of geopolitical context into technical threat analysis.

Prior Postings

  • Council on Foreign Relations · Senior Fellow
  • Reuters · Foreign Desk
GeopoliticsCyber-StatecraftStrategic Communications
Read profile
Portrait of Aoife McDermott
05

Aoife McDermott

Senior Analyst · Incident Forensics

Eight years on incident response teams at three Fortune 100 firms. Built and led the forensic methodology toolkit used internally. The analyst clients ask for when the breach is already in the news.

Prior Postings

  • Mandiant · Principal IR
  • Fortune 100 · IR Team Lead
Incident ResponseDigital ForensicsCrisis Coordination
Read profile
Portrait of Johan Eriksen
06

Johan Eriksen

Senior Analyst · Source Operations

Former intelligence officer at the Norwegian Intelligence Service. Built and runs SCRYER’s human-source network across Northern and Eastern Europe. Quiet, methodical, and very rarely wrong.

Prior Postings

  • Norwegian Intelligence Service · Operations
  • NATO CCDCOE · Liaison
Human SourcesOSINTCounter-Surveillance
Read profile

CAREERS · OPEN POSITIONS

We hire from the inside.

We hire former CISA, NCSC, and CIA cyber officers and senior research journalists. Permanent positions in Washington DC, London, and Singapore. Peer review is part of the contract.

Inquire about positions

All inquiries handled with discretion