Adam C. Hoffman

Led the development of an enterprise intelligence and insider threat program from charter to full operations — vision, threat assessment, intake, and SOPs — protecting ~55,000 users and ~85,000 assets across 160 countries.

Authored the Insider program charter — mission, scope, authorities, oversight — securing executive approval and aligning Legal, HR, Privacy, and business behind a defensible governance model addressing privacy and escalation.

Authored threat management playbooks — intake, triage, investigation, escalation, case management — covering data loss, fraud, espionage, IT misuse, and concerning behavior / workplace violence, aligned to the CERT Common Sense Guide, NIST CSF 2.0 and Carnegie Melon SEU Insider Best Practices.

Set escalation thresholds and advised senior leadership on critical risk decisions during insider and nation-state-linked incidents, coordinating global response and delivering timely, defensible, legally sound investigations.

Drove over-the-horizon threat identification and escalation through training and awareness briefings on nation-state threats, economic espionage, and social engineering for executives, high-risk roles, and frontline partners globally.

Served as corporate liaison to the FBI, NSA, and other U.S. government agencies, advancing public–private collaboration, threat sharing, deconfliction, and joint response.

Briefed senior leadership on emerging risk — AI-enabled threats, digital exposure and data loss, critical asset protection, and third-party/supply chain exposure — supporting secure growth and operational continuity.

Developed intelligence and investigations professionals through mentorship, engagement, and talent programs — building a high-trust, high-performance function and sustainable pipeline.

Led threat defense mission planning to secure business operations for the nation's largest critical infrastructure energy provider, delivering anticipatory warning of emerging threats.

Owned vendor and platform strategy for enterprise threat intelligence — defining technical requirements, managing integration and implementation, and driving stakeholder adoption; automated collection and analysis to democratize intelligence access for leaders and operators.

Led active threat monitoring and research across internal and external sources, mapping industry-specific threats to drive risk mitigation strategy and analyzing attacks against the enterprise and peers to identify exposure, gaps, and priorities.

Built proactive detection and risk discovery capabilities through threat hunting engagements and detection engineering, sharpening incident response through intelligence-driven operations.

Built and managed strategic partnerships including the Joint Cyber Defense Collaborative (JCDC), vendor intelligence channels, global research communities, nation-state cybersecurity programs, and international partners.

Briefed executives with timely, decision-ready intelligence using structured analytic tradecraft: MITRE ATT&CK, Diamond Model, Cyber Kill Chain, Admiralty scoring, ICD 203, JP 2.0 and estimative probability language.

Produced counterintelligence threat assessments protecting sensitive global operations and personnel; developed and managed clandestine technology tradecraft and managed attribution systems.

Advised senior leaders and intelligence officers on risk assessment, mitigation, and secure technology use within human intelligence (HUMINT) operations.

Served as subject matter expert on interagency planning teams for virtual operations tradecraft and enterprise cybersecurity.

Applied multiple intelligence disciplines — SIGINT, OSINT, HUMINT, CI, all-source — to develop threat assessments and strategic defense plans protecting ongoing operations.

Performed national security investigations, computer forensic investigations, hardware examinations, and technical support to investigations and operations.

Conducted intelligence operations and analysis in support of counterterrorism and national security investigations, organized crime investigations, trade-based money laundering and financial crimes investigations.