Mark Woan
Principal Security Researcher (MSTIC) at Microsoft
United Kingdom
Summary
👤
Senior🎓
Top SchoolMark Woan is a Principal Security Researcher at Microsoft MSTIC with 14 years of hands-on experience in threat hunting, DFIR and application security across cloud and enterprise environments. He blends deep technical craftsmanship—C#, Go, Python, Linux, binary parsing and database work—with CREST-certified expertise in both host and network intrusion analysis and web application testing. At Microsoft he focuses on cloud telemetry (Azure Event Hubs, Storage, Cosmos DB, Kusto/KQL) and has authored 100+ detectors and public threat research that shaped high-profile investigations. Previously he led incident response and built large-scale automated hunting platforms using statistical analysis rather than signature-based IoCs. He’s as comfortable shipping security tooling and bespoke clients as he is performing forensic deep-dives, and maintains active open-source work in Go, C# and Python. Based in the UK, he combines investigative rigor with production-grade engineering to turn threat intelligence into reliable detections and operational systems.
14 years of coding experience
12 years of employment as a software developer
BSc (Hons) Computing, BSc (Hons) Computing at University of Northampton
Github Skills (80)
windows10
security10
text-files10
monitoring10
splunk10
data-transfer10
ids10
color-picker10
rule10
searching10
desktop10
powertoys10
logging10
sdk9
golang9
Programming languages (7)
Github contributions (5)
woanware/reg-entropy-scanner
Nov 2018 - Nov 2018
Contributions:2 releases, 6 commits, 3 pushes in 1 day
woanware/LogViewer
Jul 2016 - Jul 2019
Contributions:12 releases, 46 commits, 1 PR in 3 years
logviewertext-filessearching
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.