Carlos Carrillo

Carlos Carrillo is a seasoned cybersecurity leader with over 27 years of experience managing high-profile intrusion investigations and leading teams of all sizes. Currently serving as Director of Cyber Simulations at SANS, Carlos oversees the development of cyber range products and the SANS Executive Cyber Exercise, preparing executives and professionals to handle complex cyber threats.

Previously, at IBM and Mandiant, Carlos built global threat intelligence partnerships, led the development of large-scale intelligence-sharing communities, and conducted critical APT investigations for Fortune 100 companies, including contributing to the landmark APT-1 report. A former U.S. Air Force officer, he directed cyber operations and supported advanced nation-state investigations. Additionally, Carlos has trained FBI cyber agents, executives, and security professionals, earning recognition for his expertise in curriculum development and instruction. He holds advanced degrees in Information Assurance and Computer Science.