Mark Woan
Principal Security Researcher (MSTIC) at Microsoft
United Kingdom
Summary
👤
Senior🎓
Top SchoolMark Woan is a Principal Security Researcher at Microsoft MSTIC with 14 years of hands-on experience in threat hunting, DFIR and application security across cloud and enterprise environments. He blends deep technical craftsmanship—C#, Go, Python, Linux, binary parsing and database work—with CREST-certified expertise in both host and network intrusion analysis and web application testing. At Microsoft he focuses on cloud telemetry (Azure Event Hubs, Storage, Cosmos DB, Kusto/KQL) and has authored 100+ detectors and public threat research that shaped high-profile investigations. Previously he led incident response and built large-scale automated hunting platforms using statistical analysis rather than signature-based IoCs. He’s as comfortable shipping security tooling and bespoke clients as he is performing forensic deep-dives, and maintains active open-source work in Go, C# and Python. Based in the UK, he combines investigative rigor with production-grade engineering to turn threat intelligence into reliable detections and operational systems.
14 years of coding experience
12 years of employment as a software developer
BSc (Hons) Computing, BSc (Hons) Computing at University of Northampton
Github Skills (63)
monitoring10
log-viewer10
windows10
splunk10
security10
powertoys10
ids10
logging10
command-palette10
rule10
sha9
python9
usb9
parser9
tcp9
Programming languages (8)
Github contributions (5)
the-room/the-room.github.io
Feb 2018 - Aug 2025
Contributions:29 pushes in 7 years 7 months
woanware/reg-entropy-scanner
Nov 2018 - Nov 2018
Contributions:2 releases, 6 commits, 3 pushes in 1 day
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.