Former Mandiant COO and President John Watters Joins Mitiga as Independent Board Member

Cybersecurity veteran brings 30+ years of cybersecurity experience, building companies and M&A, ‍most recently selling to Google for $5.4B.

NEW YORK, February 15, 2023 -- Mitiga, the cloud and SaaS incident response leader, today named cybersecurity veteran John Watters as an independent board member, complementing the company’s executive team.

Watters’ 30-year career includes leadership roles with both Mandiant and FireEye, which were preceded by his serving as founder, Chairman, and CEO of iSight Partners. Previously he served as Chairman and CEO of the security intelligence firm iDEFENSE. Watters also held leadership positions at Dorset Capital Corporation, EPO Holdings, and Bankers Trust. Today he is a Venture Partner at SYN Ventures, which specializes in cybersecurity investments.

“With the accelerated move to the cloud, it’s increasingly important for customers to pre-position breach readiness as part of any cloud migration,” stated Watters. “Otherwise, customers may find themselves in a precarious position when trying to recover from a breach and not having the skills or data required for a forensics investigation. Mitiga has a very elegant solution that enables companies to respond to sophisticated attacks in their SaaS and Cloud environments immediately. This approach of building resiliency gives customers migrating to the cloud peace of mind, knowing that they will be able to prevent a crisis even in the event of a severe breach.”

Mitiga’s leadership expressed the ways that Watters experience will support Mitiga’s objectives and trajectory. “John’s addition to our team as a board member significantly enhances Mitiga’s advantage,” stated Tal Mozes, co-founder and CEO, Mitiga. “John has a deep understanding of the incident response market, as well as the business and security needs of today’s transforming organizations, which makes him very well positioned to help Mitiga in its journey as a global leader. We’re looking forward to leveraging his counsel and expertise as we continue to advance our corporate mission and objectives—delivering the industry’s best platform for cloud and SaaS incident readiness and response.”

LAST UPDATED:

October 17, 2023

Don't miss these stories:

From Rogue OAuth App to Cloud Infrastructure Takeover

How a rogue OAuth app led to a full AWS environment takeover. And the key steps security leaders can take to prevent similar cloud breaches.

CORSLeak: Abusing IAP for Stealthy Data Exfiltration

When people talk about “highly restricted” cloud environments, they usually mean environments with no public IPs, no outbound internet, and strict VPC Service Controls locking everything down.

Defending SaaS & Cloud Workflows: Supply Chain Security Insights with Idan Cohen

From GitHub Actions to SaaS platforms, supply chain threats are growing. Hear Mitiga’s Idan Cohen and Field CISO Brian Contos explore real-world compromises, detection tips, and strategies to strengthen your cloud security.

Inside Mitiga’s Forensic Data Lake: Built for Real-World Cloud Investigations

Most security tools weren’t designed for the scale or complexity of cloud investigations. Mitiga’s Forensic Data Lake was.

Measurements That Matter: What 80% MITRE Cloud ATT&CK Coverage Looks Like

Security vendors often promote “100% MITRE ATT&CK coverage.” The reality is most of those claims reflect endpoint-centric testing, not the attack surfaces organizations rely on most today: Cloud, SaaS, AI, and Identity.

How Threat Actors Used Salesforce Data Loader for Covert API Exfiltration

In recent weeks, a sophisticated threat group has targeted companies using Salesforce’s SaaS platform with a campaign focused on abusing legitimate tools for illicit data theft. Mitiga’s Threat Hunting & Incident Response team, part of Mitiga Labs, investigated one such case and discovered that a compromised Salesforce account was used in conjunction with a “Salesforce Data Loader” application, a legitimate bulk data tool, to facilitate large-scale data exfiltration of sensitive customer data.