Denis Calderone

About Denis Calderone

I have worked in the information technology field for almost 30 years with the last 25 being completed dedicated to information security. I hold CISSP and CISA certifications and pride myself at viewing information security in a holistic light. I do not believe that the security challenges our businesses face today can simply be met by installing point solutions or checking off regulatory audit check sheets. Each client faces unique problems and threats. An understanding of the industry threat profile, corporate culture, and the companies risk tolerance must always be considered when addressing corporate security needs. I also strongly believe in building strong security frameworks which allow for integration of security controls at every layer of technical operations. By doing this you incorporate security into the work culture instead of addressing security needs as a series of projects which don’t scale and grow with the business.Currently I’m a Senior Managing Director at J.S. Held where I head Cyber Security Services along side my colleagues in our world class Digital Investigations and Discovery practice. A came to J.S. Held via an M&A deal when J.S. Held purchased TBG Security which i helped found and worked as a principal for almost 18 years. At TBG I headed up the technical consulting arm of the operation and perform the role of CTO. With the business merger between TBG and J.S. Held I managed to maintain the agility of a boutique consulting group while gaining all the benefits of a larger consultancy with 50 years of pedigree behind it. My entire team transitioned to J.S. Held and 2+ years later, we have only added to that team. Prior to J.S. Held and TBG Security, I worked for Exodus Communications as part of their North East Security Practice, and also worked for Lycos for a short period of time as their information security director.Away from work, I enjoy music, play the guitar, love my St. Bernard, think of cooking as a hobby and a sport and enjoy spending time with my friends and family. If any of this interests you, I encourage you to please reach out and contact me.Specialties: Network Penetration Testing, Application Penetration Testing, Vulnerability Assessments, Security Policy, Development, Regulatory and Standards Compliance Testing

Experience

1. Principal, COO, CRO

   Suzu Labs

   Aug 2025 — Present

   As CRO and co-founder of Suzu, I lead go-to-market strategy and client success across our cybersecurity and AI engineering service lines. Drawing on decades of experience from my time building a boutique consultancy (later acquired by J.S. Held), I focus on designing and delivering solutions that solve real business problems, whether operational, technical, or strategic.At Suzu, we don’t just experiment with emerging technology, we translate it into pragmatic, security-first solutions that help our clients reduce risk, modernize infrastructure, and unlock new revenue streams. From penetration testing and vCISO programs to secure AI deployment, I’ve helped drive significant revenue growth through high-impact services tailored to the evolving needs of our clients.

Skills

• Vulnerability Assessment
• Cissp
• Information Security
• Penetration Testing
• Security
• IT Strategy
• Network Forensics
• Information Technology
• Cloud Computing
• Network Security
• Integration
• Networking
• Disaster Recovery
• Computer Security
• Information Security Management
• Data Center
• Virtualization
• Security Architecture Design
• Pci Dss
• Cisa
• Iso 27001
• Ips
• Security Audits
• Ids
• Vulnerability Scanning
• Vulnerability Management
• Application Security
• Identity Management
• Network Architecture
• Information Assurance
• Intrusion Detection