GreyNoise Intelligence Recruited New Senior Leadership

The firm hired four security veterans to scale its government-facing threat intelligence business.

Updated on Sept. 28, 2026 in People

Isometric editorial illustration of a modular secure router component with heat sink fins, symbolizing network security infrastructure. — GreyNoise Intelligence has appointed four security veterans, including Andrew Thompson, to expand the firm's government-focused threat intelligence and infrastructure security operations. AI Illustration. Upload story photo >

Live Poll

Do you trust private intelligence firms to manage critical national security data?

In August 2026, GreyNoise Intelligence appointed Andrew Thompson as senior vice president of adversary operations to expand its government service offerings. The company, which provides threat data to more than 400 government agencies, also announced three additional senior leadership hires.

Why it matters

GreyNoise is scaling its team to address the growing risk of adversaries using AI to exploit internet-facing infrastructure. As network devices like firewalls and routers cannot host traditional security agents, companies must rely on external threat intelligence to detect breaches.

The firm currently supports over 400 government agencies with its threat data. New leadership includes Andrew Thompson, who brings three years of experience from Google and six years from Mandiant.

The players

Andrew Thompson

A former Google and Mandiant executive and Marine Corps veteran appointed to lead adversary operations.

GreyNoise Intelligence

A cybersecurity firm that provides threat intelligence by monitoring internet-facing devices.

Joe Lampert

A new director for national security solutions with 20 years of military service experience.

Mark Mager

The company's newly appointed head of adversary engagement.

Steve Miller

A principal threat researcher joining the firm to support government business expansion.

The details

GreyNoise integrates threat intelligence directly into systems including VPNs, firewalls, and routers to compensate for the limited telemetry available on these devices. By appointing specialized staff like Thompson, the company intends to codify its defensive strategy against automated AI threats. These hires reflect a shift toward securing infrastructure that is traditionally difficult to monitor via standard agent-based software.

August 2026: Andrew Thompson began his tenure as senior vice president.
September 23, 2026: GreyNoise officially announced the four senior staff appointments.

Market Landscape

GreyNoise's expansion follows the industry-wide trend of building specialized intelligence teams to defend network hardware that cannot support traditional security software. The move mirrors a broader competitive focus on securing edge infrastructure as AI-powered exploits become more prevalent.

Operators managing internet-facing devices should evaluate if their current threat intelligence providers offer sufficient visibility into network-level telemetry. Ensure your infrastructure vendor roadmap accounts for the limitations of agentless security environments.

The takeaway

The rise of AI-driven exploits forces organizations to prioritize intelligence for hardware that lacks traditional security agents. Review your current network device security posture to determine if your hardware requires supplementary threat data feeds to maintain visibility.