John Doyle
Lecturer
Director of CTI Services at Palo Alto Networks Unit 42
Specialities
Digital Forensics and Incident Response
Connect with John

About John
John has over 20 years of experience working in Cyber Threat Intelligence (CTI), Digital Forensics, Cyber Policy, and Security Awareness and Education. John is the Director of CTI Services at Palo Alto Networks’ Unit 42 where he runs a customer-facing threat intelligence and dark web service line. He previously worked at Mandiant as a principal analyst before moving into an intelligence consulting role where he helped CTI teams in the financial, healthcare, retail, defense, and government sectors mature their CTI programs, upskilling team capability and organizational reach. John developed the Mandiant CTI Analyst Core Competencies Framework to fill a key industry gap, helping aspirant and current analysts establish growth pathways for a career within this field.
