Matt Swann
Chief Security Architect, OneDrive SharePoint at Microsoft
Redmond, Washington, United States
Summary
🤩
Rockstar🎓
Top SchoolMatt Swann is a seasoned security leader and Chief Security Architect for OneDrive and SharePoint at Microsoft, bringing 14 years of focused experience protecting customer data in large-scale cloud services. He leads product and operational security, privacy, and incident management for high-value storage and collaboration platforms, building intrusion detection, risk reduction, and adversary-disruption capabilities across hundreds of thousands of servers. Previously he led the PROTECT team that delivered detection, response, and preventative controls used across Microsoft 365 and shared with the wider security community. A hands-on engineer early in his career, he drove security testing, SDL compliance, and developed tooling and research including patented password techniques and forensic utilities for Office and SharePoint. He contributes to open-source security tooling such as the microsoft/krabsetw ETW wrapper, reflecting a blend of deep systems-level expertise and large-scale cloud security architecture. Based in Redmond, he combines incident-tested operational rigor with a persistent focus on making cloud storage resilient to real-world adversaries.
14 years of coding experience
6 years of employment as a software developer
California Polytechnic State University, San Luis Obispo
Github Skills (10)
etw10
filtering10
c-language10
nuget-package10
cprogramming-language10
wrapper10
filter10
asp-net9
dotnet9
net9
Programming languages (7)
Github contributions (5)
microsoft/krabsetw
May 2018 - Oct 2021
KrabsETW provides a modern C++ wrapper and a .NET wrapper around the low-level ETW trace consumption functions.
Role in this project:
Back-end Developer
Back-end DeveloperContributions:63 reviews, 28 commits, 106 PRs in 3 years 5 months
Contributions summary:Matt primarily worked on improving the `krabsetw` repository by addressing code review feedback and incorporating best practices for Microsoft-owned NuGet packages. They implemented and refined features related to ETW (Event Tracing for Windows) wrappers, including native and C++/CLI support for filtering. The user also focused on code optimization, incorporating early returns and improving performance for GUID specialization. Additionally, they addressed compilation issues and updated NuGet versions to reflect the changes.
c-wrapperetwtracenuget-packagesmodern-c
swannman/ircapabilities
Dec 2016 - Jul 2021
Incident Response Hierarchy of Needs
Contributions:1 review, 20 commits, 4 PRs in 4 years 8 months
devopshierarchyincident-managementincident-response
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.