Charles Bulkley

• Direct three enterprise support divisions—Human Capital, IT, and Acquisitions/Logistics—aligning operations with organizational goals and leading a high-performing team of 80 staff members who provide enterprise services for a workforce of over 700 personnel.

• Manage the execution of enterprise program plans, policies and guidelines, including IT services, IT research and development, cybersecurity, human capital, employee development, procurement, facilities, and compliance programs (Privacy Program, FOIA Program, and records management).

• Improved business efficiency by leading sprints to resolve internal control issues and developing SOPs and policies in partnership with senior executive leadership and political appointees.

• Oversee the implementation of IT operations, security, research and development initiatives, enhancing the organization’s technical capabilities and ability to support nation-wide operations, including DevSecOps in both AWS and Azure cloud-based environments.

• Directed investigations and operations across the Pacific, overseeing offices in five countries, Australia, Indonesia, Japan, the Philippines, and Thailand while managing multiple teams with varying backgrounds and specialists (US Special Agents, local national investigators, intelligence analysts, administrative specialists, IT specialists, financial budget analysts, supply technicians, drivers, etc.) in a fast pace environment, often responding to time-sensitive situations such as the assassination of the former Prime Minister of Japan.

• Collaborated with foreign law enforcement during international investigations and activities on a variety of topics, including network intrusions, malware analysis, cybersecurity incidents and shared indicators of compromise (IOCs) in order to address root causes and aid in the rapid response to prevent similar cyber incidents.

• Served as Lead Computer Forensic Examiner on high-profile cases, including an FBI Most Wanted investigation, executing complex digital forensics and incident response efforts to support federal prosecutions and national security priorities. Led a team of six senior FBI Computer Forensic Examiners supporting both domestic and international major cybercrimes.

• Co-led a US Presidential cybersecurity initiative under the National Security Council, driving the development of real-time, cross-sector threat intelligence sharing using STIX/TAXII and the MITRE ATT&CK Framework—impacting federal, state, local, private sector, and international stakeholders.

• Held executive leadership roles at Europol, including FBI Head of Liaison Bureau, the FBI’s National Manager for the Malware Analysis System (forensics platform), and as an FBI representative on the Joint Cyber Action Taskforce supporting international investigations and strengthening global collaboration against cybercrime.

• Participated in federal search warrants by conducting on-site forensic activities, supporting major FBI investigations and assisting FBI Case Agents and Assistant US Attorneys. Applied advanced expertise in tools such as X-Ways, FTK, EnCase, Cellebrite, Splunk, and scripting languages to perform computer forensic examinations and drive investigative success.

• Served as an investigative liaison to a regional Computer Emergency Response Team, leading cyber threat coordination between intelligence, legal, and technical stakeholders.

• Directed cyber investigations as part of a security operations center incident response team, identifying indicators of compromise (IOCs), analyzing breach impacts, and authoring actionable intelligence reports for senior decision-makers.

• Developed and institutionalized digital forensics and malware analysis standards across Army Pacific networks, enhancing investigative capabilities and enabling Special Agents to respond effectively to cyber attacks.

• Conducted post-breach analysis of critical IT infrastructure, identifying TTPs, root causes, and data exfiltration patterns; produced technical assessments and strategic recommendations to mitigate future risks across the DoD and Intelligence Community.

• Applied advanced technical expertise—including host-based/network forensics, malware reverse engineering, and automation utilizing forensic tools such as FTK, EnCase, Wireshark, Cellebrite, and Splunk to support national security investigations.