Jason Antrim

About Jason Antrim

I’ve spent 15 years building and leading security organizations in some of the most consequential and heavily targeted environments in the world.At Apple, I was the primary incident commander for the company’s highest-severity incidents, led 500+ insider risk and DFIR investigations, and built forensic tooling that became critical for macOS incident response. At Cruise, I built much of the security program from the ground up. I joined as the company’s first D&R technical lead and built a 60-person organization spanning Detection & Response, Security Observability, Threat Intelligence, Offensive Security, Insider Risk, Network Security, Zero Trust, Privacy Engineering, and GRC. We defended against advanced adversaries, and enabled the first commercial driverless ridehail launch in a major U.S. city. I’ve operated at the executive level, reporting to the CISO, presenting to the Board, and partnering with CEOs and senior leadership on the most sensitive security incidents and investigations. I’ve also stayed deeply technical - building tools, creating detections, and leading incidents and investigations. I’m driven by the challenges of novel attack surfaces, sophisticated adversaries, high-consequence environments, and the kind of mission where getting security right is critical.

Experience

1. Head of Enterprise Security (d & R, Threat Intel, Insider Risk, Offsec, Corpsec, Vm, Grc, Privacy)

   Cruise

   Mar 2021 — Present

   Built and scaled Cruise’s enterprise security organization from inception to a 60-person, 10-function team supporting one of the most safety-critical autonomous vehicle platforms in the world. Functions include: Detection & Response, Security Observability, Threat Intelligence, Insider Risk, Offensive Security, Zero Trust, Network & Endpoint Security, Vulnerability Management, GRC, and Privacy Engineering.Enabled the safe launch and rapid expansion of commercial driverless ridehail in major U.S. markets with zero material cybersecurity incidents.Established a follow-the-sun global incident response capability by expanding operations across the U.S, Australia, and Germany. Partnered with executive leadership to investigate and mitigate sensitive insider and security risks, including identifying and addressing threats to intellectual property and brand reputation.Architected and deployed the Cruise Detection Engine, a detection-as-code platform that increased critical detection coverage by 95% across MITRE ATT & CK while eliminating legacy SIEM dependencies and reducing annual tooling costs by over $1M. Built and scaled security automation capabilities across endpoint, identity, and cloud environments, enabling rapid, programmatic containment of compromised users and devices at scale.Led the rollout of phishing-resistant authentication (WebAuthn) to users, materially improving phishing resistance across the enterprise. Enabled key business milestones by achieving SOC 2 and PCI compliance, including supporting Cruise’s partnership with Walmart and broader commercial expansion efforts. Regularly briefed the Cruise and GM Boards of Directors on cybersecurity posture, risks, and strategic investments, driving executive alignment on security priorities.Recruited, developed, and led high-performing security leaders and teams, building one of the most advanced security organizations in the world.

Education

• Champlain College

  Master of Science, Digital Forensic Science

  2016 — 2019