Jon Gellin is the Threat Operations Lead at Hoxhunt, specializing in phishing and initial-access threats.
Over the past five years, he has analyzed hundreds of thousands of global phishing reports, building deep domain expertise in email-borne initial access.
Jon leads intelligence initiatives that codify subjective analyst observations into objective, measurable signals used for detection, simulation, and response.
With his team, he links Hoxhunt’s large-scale security training telemetry to real-world attacker tradecraft, closing the loop from live attack to mirrored training outcomes.
Jon has presented research at various security events, covering both adversarial techniques and practical defenses.