
Noah Rubin
AT A GLANCE
Noah has ten years of professional experience leading complex investigations, advising company boards and leaders on security strategy and controls, and scaling security organizations. He serves as the Technical Lead of the Complex Digital Events and Expert Services (CDE) practice.
Prior to joining Kroll, Noah was a Senior Security Engineer at Amazon for four years, where he led cross-company security programs and built Amazon’s internal security data lake platform. He spearheaded programs to continually verify that all Amazon Web Services (AWS) customer data are encrypted at rest and migrate AWS service teams from long-lived and static to short-term and frequently rotated credentials. As the Lead Security Engineer for Amazon’s internal security data lake platform, Noah partnered with incident response, insider threat, threat intelligence, compliance and other internal stakeholders to automate compliance processes, improve DDoS protection, streamline incident response workflows and detect and prevent threat actor activity across AWS APIs. Noah also led a program to define and implement the security logging standards for thousands of Amazon services.
Before joining Amazon, Noah was a Director and Chicago office lead for Stroz Friedberg (now LevelBlue), where he led hundreds of investigations ranging from nation-state attacks, ransomware, insider threat and trade secret theft to privacy and compliance violations, API audits and data remediation, and scraping and bot prevention. He partnered closely with the threat intelligence team to track threat actor activity, conducted research on and reverse engineered malware and developed software to analyze forensic artifacts at scale. In his role as Lab Lead, he managed five direct reports and mentored others in forensics, reverse engineering, software development and related skills.
Noah presents at industry conferences, including the Privacy + Security Forum and the SANS DFIR Summit and has contributed to open-source security software like analyzeMFT and OSQuery.
Noah holds a B.S. in policy analysis and management and a minor in computer science from Cornell University.
Stay Ahead with Kroll
Cyber and Data Resilience
Kroll merges elite security and data risk expertise with frontline intelligence from thousands of incident responses and regulatory compliance, financial crime and due diligence engagements to make our clients more cyber- resilient.
Complex Digital Events
Bespoke services for complex incident response, regulatory investigations, litigation support, board-level engagements and national security matters.