Key Facts
Career & Education
About
Robert M. Lee is an American cybersecurity expert, military veteran, and entrepreneur renowned for his work in protecting industrial control systems (ICS) and operational technology (OT) environments from cyber threats. As the founder and CEO of Dragos, Inc., established in 2016, he has built a company that specializes in threat detection, response, and intelligence for critical infrastructure sectors such as energy, manufacturing, and transportation. His leadership has positioned Dragos as a key player in defending against sophisticated attacks, including those attributed to nation-state actors like Russia and Iran. Lee's career is rooted in military service with the United States Air Force, where he served as a cyber warfare officer from 2005 to 2016, including roles at the Joint Special Operations Command (JSOC) and the Air Force's cyber operations squadrons. During his tenure, he led threat intelligence operations and contributed to high-profile cyber missions, gaining expertise in dissecting advanced persistent threats (APTs) targeting industrial systems. After transitioning from active duty to the reserves, Lee worked in the private sector before founding Dragos to bridge the gap between military-grade cyber capabilities and commercial industrial needs. He holds advanced certifications and has testified before U.S. congressional committees on cybersecurity risks to critical infrastructure. Beyond his corporate role, Lee advocates for policy changes to enhance national resilience against cyber espionage and sabotage. He co-authored books and papers on ICS security and maintains an active presence in industry forums. While no major personal controversies are documented, his firm has been involved in high-profile incident responses, such as the 2021 Colonial Pipeline ransomware attack analysis. Lee's influence extends through collaborations with government agencies like CISA and international partners, underscoring his role in global influence networks around digital security and critical infrastructure protection. He is also a frequent speaker, author, and advisor on OT cybersecurity, emphasizing the need for specialized defenses in industrial settings distinct from IT networks.