
Tarah Wheeler
Tarah Wheeler is a cybersecurity expert and consultant with extensive technical and executive experience in the field. She has held senior security leadership roles at Splunk and Symantec, where she built offensive security programs and led engineering teams to safeguard critical systems. As the Founder and CEO of Red Queen Dynamics, Wheeler now advises a global roster of organizations on improving their cyber defenses, incident response readiness, and data privacy practices. Her domain specialties include offensive security (ethical hacking), cybersecurity policy, and incident response planning, allowing her to bridge the gap between hands-on technical solutions and strategic governance.
Widely recognized as a thought leader in cybersecurity, Wheeler currently serves as Senior Fellow for Global Cyber Policy at the Council on Foreign Relations, contributing to international cyber strategy discussions. She has been a Fulbright Cybersecurity Scholar and continues to influence the industry through board service (including on the Electronic Frontier Foundation’s Board) and publications. In consulting engagements, Tarah Wheeler brings a unique combination of deep technical credibility and high-level policy insight. She helps clients—from tech startups to government agencies—navigate complex cyber threats and regulatory challenges, delivering actionable guidance to bolster their security posture. With her blend of offensive security expertise and executive perspective, Wheeler is a sought-after advisor who equips organizations to proactively manage cyber risks and respond decisively to security incidents.
Professional Experience
-
Founder & Chief Executive Officer (CEO), Red Queen Technologies (formerly Red Queen Dynamics) – Seattle, WA (2012–Present)
Founded an information security consultancy focused on cybersecurity compliance and risk management for public and private organizations[1]. Leads global offensive and defensive security engineering teams, serving as incident commander and principal investigator during security crises[2]. Architected encrypted communication systems and multi-continental disaster recovery plans for clients, innovating in cloud security and data privacy solutions[3]. Provides C-level security advisement and strategy, achieving measurable risk reduction and improved cyber resilience for client organizations. -
Senior Fellow – Global Cyber Policy, Council on Foreign Relations (CFR) – Washington, DC (2022–Present)
Researches and advises on international cybersecurity strategy and foreign policy, focusing on cyber-defense frameworks, global threat intelligence, and norms for state behavior in cyberspace[4]. Engages with policymakers and industry leaders to shape effective cybersecurity policy, contributing expertise through CFR publications and task forces. Elected to Life Membership in the Council in 2023 in recognition of contributions to global cyber policy[5]. -
Cyber Project Fellow, Belfer Center for Science & International Affairs, Harvard University – Cambridge, MA (2020–2022)
Conducted research on emerging cyber threats and national security at Harvard’s Belfer Center[6]. Co-authored a landmark white paper on adapting aviation safety models to cybersecurity incident review processes[7]. Collaborated with academic, military, and government stakeholders to develop strategies for improving national cyber defense and resilience. -
Contributing Editor for Cybersecurity, Brookings Institution – Washington, DC (2020–2022)
Served as the contributing cybersecurity editor for the Brookings Institution’s TechStream publication[8]. Provided expert analysis on cyber policy issues including cyber warfare, supply chain security, and critical infrastructure protection. Published influential commentary on incidents such as nation-state cyberattacks (e.g. SolarWinds) to inform policymakers and the public[9]. -
US/UK Fulbright Cyber Security Scholar, University of Oxford – Oxford, UK (2020–2021)
Awarded the prestigious Fulbright Cyber Security Scholar Award for distinguished work in the field[10]. Conducted doctoral research at Oxford University on defining cyber war crimes and mitigating civilian harm from state-sponsored cyberattacks, in partnership with the UK National Health Service (studying the impact of the WannaCry ransomware on hospital systems)[10]. Served as a Visiting Scholar at Oxford’s Centre for the Resolution of Intractable Conflict during this period, bridging technical cybersecurity research with international conflict resolution[11]. -
International Security Fellow (Cybersecurity Policy Fellow), New America – Washington, DC (2017–2022)
Led a multi-year international cybersecurity capacity-building project funded by the Hewlett Foundation’s Cyber Initiative as part of New America’s International Security program[12]. Focused on global cyber capacity, internet governance, and improving cybersecurity cooperation among nations. Produced policy recommendations and convened international experts to address cyber conflict and strategy as a key researcher in New America’s cybersecurity think tank[13]. -
Head of Offensive Security & Technical Data Privacy, Splunk – San Francisco, CA (2018–2019)
Built and directed Splunk’s offensive security team, overseeing penetration testing (“red team”) operations to identify and remediate vulnerabilities in Splunk’s products and infrastructure. Developed technical data privacy policies and compliance strategies to protect user data across the company’s big data analytics platform[14]. Collaborated with engineering and product teams to integrate security best practices, significantly strengthening the organization’s security posture. -
Senior Director of Engineering & Principal Security Advocate (Website Security), Symantec – Mountain View, CA (2016–2017)
Led engineering teams in Symantec’s Website Security division, managing the development of certificate authority and web security products that safeguard online transactions[15]. Acted as Symantec’s Principal Security Advocate, engaging with the security community and translating technical threats into practical guidance for businesses[15]. Drove security improvements in web trust services and product engineering, until the role concluded amid reorganization in 2017[16]. -
Co-Founder & CEO, Fizzmint – Seattle, WA (2012–2016)
Co-founded and grew Fizzmint, a technology startup providing automated end-to-end human resources and employee management services for tech companies[17]. Oversaw all aspects of the startup’s operations – product development, engineering, fundraising, and team leadership – delivering a platform that streamlined HR tasks for startups. Achieved early adoption within the Seattle tech community and guided Fizzmint through initial growth phases as a pioneering HR tech company. -
Adjunct Professor (Information Technology), Seattle Central College – Seattle, WA (2015–2016)
Taught undergraduate courses in information technology, covering topics such as programming and cybersecurity fundamentals. Developed curriculum that incorporated real-world security scenarios and best practices, providing students with practical skills for technology careers. Mentored and advised students, promoting diversity and inclusion in tech through education. -
Systems Architect, Silent Circle & Blackphone – Geneva, Switzerland (2012–2014)
Designed and implemented secure mobile communications systems at Silent Circle (the encrypted communications firm behind Blackphone)[18]. Architected end-to-end encryption solutions for voice, text, and data on the Blackphone platform, enabling private and secure communications for users worldwide. Coordinated with international engineering teams to deploy robust global encryption infrastructure, contributing to Silent Circle’s mission of privacy-by-design in telecommunications.
Education and Certifications
-
Education and Certifications
-
· Doctor of Philosophy (Dphil) in Social Data Science – University of Oxford, UK (2020–Present, expected 2026)[19]. Research focus: Machine Learning and Natural Language Processing applications in cybersecurity (Fulbright-supported research).
-
· Master of Science (M.S.) in Political Science – Portland State University, OR (2004)[20]. Thesis in decision modeling and conflict (cognitive behavioral theory & statistical modeling).
-
· Bachelor of Arts (B.A.) in International Relations – Carroll College, MT (2001)[20].
-
· Postgraduate Certificate in Agile Development – University of Washington, WA (2011)[21]. Advanced Scrum/Agile development methodologies.
-
· Professional Certificate, Cybersecurity: Managing Risk in the Information Age – Harvard University (HarvardX) (2019)[21].
-
· Certified Information Systems Security Professional (CISSP) – (ISC)², certified since 2017[22].
-
· GIAC GXPN (Exploit Researcher & Advanced Penetration Tester) – GIAC, certified 2020.
-
· GIAC GMOB (Mobile Device Security Analyst) – GIAC, certified 2019.
-
· ISACA CISA Certified Information Systems Auditor, certified 2022
