
Push Security, a leader in browser-based detection and response, has appointed Mark Orlando as Field Chief Technology Officer (CTO) on September 9, 2025. With over two decades of experience in security operations at the Pentagon, White House, Department of Energy, and Fortune 500 enterprises, Orlando will guide Push Security’s mission to secure the browser, a critical frontier for cyber attackers.
Mark Orlando joins Push Security as Field CTO with 20+ years of experience.
Previously led security at Pentagon, White House, and Fortune 500 firms.
SANS instructor and co-founder of Bionic Cyber, focusing on cyber defense.
Push Security enhances browser-based detection and response capabilities.
Orlando to bridge practitioner needs with research-driven innovation.
Browser security addresses phishing, session hijacking, and other threats.
Orlando’s appointment strengthens Push Security’s strategy to redefine enterprise security by focusing on the browser, where attackers increasingly target users. “Everywhere I’ve worked, from government to the private sector, I’ve seen the same challenge: defenders trying to protect users where they actually work,” said Orlando. “Today, that’s the browser. It’s where attackers are targeting, and where security teams need to be. Push Security is one of the first companies I’ve seen that gets this right, and that’s why I’m here.”
With a career spanning roles as a SOC analyst, CTO at Raytheon Cyber, and co-founder of Bionic Cyber, Orlando brings deep expertise to Push Security. His experience includes building and leading security teams at high-profile organizations and advising enterprises on scaling cyber defense capabilities. As a SANS Certified Instructor, he co-authored LDR551: Building and Leading Security Operations Centers and teaches SEC450: SOC Analyst Training.
In his role as Field CTO, Orlando will act as a bridge between security practitioners and Push Security’s research-driven product development. “Mark embodies the defender’s mindset—he’s built teams from the ground up, taught thousands of students as a SANS instructor, and led security at the highest levels,” said Adam Bateman, CEO of Push Security. “His perspective and credibility will help us scale Push’s impact and ensure defenders can meet attackers where they are—inside the browser.”
Push Security’s platform provides real-time detection and response within the browser, offering visibility into user activity and attacker behavior. It detects threats like phishing kits and session hijacking while enforcing controls like MFA and SSO. Orlando’s strategic guidance will enhance these capabilities, helping enterprises close the browser security gap.
Push Security brings real-time detection and response to the layer where users work — and where attackers operate, the browser. By deploying a powerful agent inside the browser, Push gives defenders full visibility into user activity, attacker behavior, and session-level risk. It detects threats like phishing kits and session hijacking, enforces protective controls like MFA and SSO, and provides the telemetry security teams need to investigate fast. Think of Push as being like EDR, but in the browser. Push was founded by former red team members skilled in offensive security and security operations and is backed by Decibel, GV (Google Ventures), Redpoint Ventures, Datadog Ventures, B3 Capital, and other notable angel investors.