McKesson
40% less vulnerability backlog
Cut the critical and high-severity backlog in nine months through risk-based prioritization.
Security executive & USMC veteran
I build and lead
security programs.
I’m Rob Fuller, also known as mubix. I’ve spent 25+ years in security, from military networks and hands-on research to leading teams at United Airlines and McKesson.
I help leaders prioritize risk, build their teams, and turn security strategy into working defenses.
USMC veteranFortune 100 leadershipBlack Hat instructor since 2013Boardroom Certified (QTE)
Selected results
What I’ve built.
What I’ve improved.
Teams, programs, and measurable changes from my work at McKesson and United Airlines.
McKesson
25 people in a new organization
Built a security organization from scratch, covering Red Team, Vulnerability Management, EDR Engineering, and Endpoint Strategy.
United Airlines
60% fewer audit findings
Reduced findings year over year while directing Red Team, Cyber Threat Intelligence, and Identity & Access Management.
1.5M+ endpointsMcKesson security scope
$25M IAM programDirected at United Airlines
100,000+ employeesUnited Airlines operation
How I lead
Stay close to the work.
Build protection into the system
I design controls that reduce the burden on employees. I prioritize root causes and architecture changes that remove recurring risks.
Make risk clear to the board
I connect technical findings to business impact, investment decisions, and accountable owners.
Evaluate emerging threats
I draw on hands-on research to assess AI and quantum risks. That work includes a DHS AI threat briefing and peer review of FDD’s quantum-readiness roadmap.
Experience
From military networks
to enterprise leadership.
My career spans defense, consulting, technology, aviation, and healthcare. Start with my most recent work, or explore the full history.
Enterprise security leadership
Director, United Airlines → VP, Information Security, McKesson (current)
I built a 25-person security organization at McKesson. At United Airlines, I directed a $25M identity program and led Red Team and Cyber Threat Intelligence.
Explore enterprise roles
At McKesson, I lead security strategy across Red Team, Vulnerability Management, EDR Engineering, and Endpoint Strategy, with a scope of 1.5M+ endpoints. My team cut the critical/high vulnerability backlog 40% in nine months. I also developed the vulnerability disclosure program to support external attack surface management.
At United Airlines, I directed Red Team, Cyber Threat Intelligence, and IAM across a 100,000+ employee operation. I led a $25M IAM program, operationalized 60M+ monthly threat signals, and partnered with TSA, FBI, and ISACs on nation-state response. Audit findings fell 60% year over year.
Big tech & autonomous systems
Uber · Cruise (GM) · Black Hills Information Security
I built security automation and identity architecture, and led red and purple team work across technology and autonomous systems.
Explore technology roles
At Uber, I architected a SOAR detection and attack-emulation platform and led Red/Purple Team work across identity and access management, including the Azure AD migration. At Cruise, I worked on security for autonomous vehicles. At Black Hills Information Security, I built and led a purple-team program of about 30 assessments.
Consulting & red team
Rapid7 · GE · IBM X-Force Red
I conducted security assessments and designed security architecture at Rapid7, GE, and IBM X-Force Red.
Explore consulting roles
At GE (2011–2015), I served as Senior Red Team Analyst and Senior Security Architect. I helped architect the migration of about 500 applications to AWS. As CTO of the National CyberWatch Center, I built a cybersecurity team and developed governance, risk, and compliance frameworks for a national education initiative.
The Capitol & the Pentagon
Incident Response, U.S. Senate · Penetration Tester, Pentagon
I worked in incident response at the U.S. Senate and penetration testing at the Pentagon.
Explore government roles
At the Senate, I investigated security incidents. At the Pentagon, I tested defenses for weaknesses an attacker could exploit. I bring both perspectives to security leadership.
United States Marine Corps
Combat Engineer → Network Security Architect
I served as a combat engineer, then moved into network security architecture and defended military networks.
Explore Marine Corps role
In the Marine Corps, I moved from combat engineering (MOS 1371) to tactical data networks (MOS 0656). I learned to make decisions under pressure and build teams with clear accountability.
Research & community
Still contributing to the craft.
I teach, build tools, and help develop the next generation of security practitioners.
Black Hat USA
Instructor since 2013
From Metasploit Mastery to Abilities Driven Red Teaming. On the Training Review Board since 2026.
Hak5
Originated the WiFi Pineapple
The Jasager/KARMA research on Fonera routers that became Hak5’s WiFi Pineapple. Host of Metasploit Minute.
HBO · Silicon Valley
Senior technical advisor
Seasons 2–6, making technical concepts accurate and compelling.
More research & community work
Homeland Security
AI threat briefing
Briefed DHS on AI-driven national-security threats, from model poisoning to prompt injection.
Quantum readiness
FDD peer reviewer
Reviewed the Foundation for Defense of Democracies’ quantum-readiness roadmap.
Community
Founder & chair
NoVA Hackers · VMRG Chair · SecurityTitles.com · USMC Cyber Auxiliary founding member.
Next generation
Core red team
National CCDC and ISTS: red-teaming the student teams who become the next defenders.
In memoriam
RestInCode.com
Honoring the people who built and defended the information-security industry.
Speaking & teaching
Sharing what I learn.
Conference talks since 2007, Black Hat training since 2013, and a decade on DEF CON staff.
50+
conference talks
3
continents
200+
podcast episodes
Credentials
Technical depth. Business education.
Education
MBAMS, CybersecurityBS, Cybersecurity & Information Assurance
All three degrees from Western Governors University.
Executive
Chief Information Security Officer Certificate Program, Carnegie Mellon University (Heinz College). Completed 2026.
Clearance & networks
SECRET clearance (active)CISO SocietySANS CISO NetworkDigital Directors Network
Get in touch
Let’s talk about
your security priorities.
For CISO, fractional, interim, or advisory opportunities, reach me on LinkedIn. You can also contact me about speaking and training.