Hello, nice to meet you. I’m

Ralph Hogaboom

CAREER SUMMARY

I’m a senior cybersecurity leader and manager with 25 years experience in Information Technology. I build strong security programs in state government from the ground up. I’m interested in getting things done and stuff that works. I’m focused on people, relationships and business – I come with communication skills and a high ability to work with others. I use data analytics to demonstrate that good cybersecurity is the least-expensive way of doing business. Equally comfortable in the board room and at the linux CLI. One of my strengths is quickly turning out effective governance from the top down – strategies, policies, standards, procedures, guidelines, and baselines.

Transformational change is always possible. But it requires hard work. All the messy, unpleasant jobs that build up over time will keep an organization in a rut. Let’s do the work – and we’ll dig out of it.

BS Computer / Information Technology Management
WGU, 2016

ISC² Certified Information Systems Security Professional
CISSP, 2022

State AI Policy Steering Board
WA Office of Privacy & Data Protection

2024-2025

Strategic AI Advisory Board
Central Washington University

2024-2025

Advisory Board
WA State Enterprise Security Governance

2024-2025

EXPERIENCE

Chief Information Security Officer
Washington State Department of Natural Resources
Olympia, WA | Apr 2025-current

Senior Cybersecurity Architect
Washington State Department of Natural Resources
Olympia, WA | Feb 2022-Apr 2025

Cybersecurity Engineer, Senior Infrastructure Engineer, Interim Chief of IT
Grays Harbor College
Aberdeen, WA | Feb 2007-Jan 2022

Senior Systems Administrator
Skookum Corporation
Port Townsend, WA | Jul 2004-Jan 2007

Recent Speaking Events

  • VISIONS CIO Phoenix, Mar 2026
  • SecureWorld Seattle, Nov 2025
  • BSides PDX, Oct 2025
  • State of Washington, Oct 2025
  • BSides Seattle, Feb 2025

Make Risk Matter (for Washington State October Security Month 2025)

Most cybersecurity risk processes spend more time writing reports than influencing decisions. Leaders skim the summaries, nod at the heat maps and charts, and move on—while critical decision making happens without any awareness of uncertainty. This talk shows you why we need to drop the activities that aren’t useful, and how to connect risk analysis directly to decisions, and make your risk analysis matter.

An unexpected journey: Building a cybersecurity program for a tech-hungry, risk-taking state agency

In a state agency responsible for fighting wildland fires (including a fleet of drones, aircraft, and firetrucks) and responding to regional natural disasters, securing sensitive data and IT infrastructure is critical and challenging. From protecting endangered species data to ensuring secure computing at the most remote locations, a cybersecurity program in such an agency requires speed, flexibility, and hand-tailored problem solving. This session will discuss the steps in building a cybersecurity program from the ground up, addressing unique challenges like risk tolerance, rapid deployment, and balancing security with mission-critical operations.

Why Empathy is THE Critical (and Underrated) Cybersecurity Skill

Cybersecurity professionals often focus on technical defenses—firewalls, encryption, threat detection—but the human side of security is crucial. Empathy is THE critical and essential, yet often overlooked, skill for cybersecurity professionals. Empathy helps us understand human behavior, communicate complex security risks, and drive organizational change through buy in, budget approvals, successful project management, and collaboration across teams. By paying attention to and honing your empathy, cybersecurity professionals can create a culture of security, prevent incidents, and lead successful responses to breaches. This session will provide lots of real life, relatable stories on how empathy can improve your cybersecurity program and your team’s overall effectiveness. It will also provide practical ways – including live practice – to improve our empathy and make the cybersecurity world a better place.

Interface Magazine | People-Led Cybersecurity

Ralph Hogaboom, CISO at the Department of Natural Resources, on cybersecurity defined by long-term thinking and commitment to a vision

Beyond The Tech Podcast
May 25, 2025

sample documents

Vulnerability Mitigation Plan
Google Docs template
Use this when you can’t patch it or take it offline just yet

Electronic Gaming Risk Overview, PDF

Security Design Reviews, PDF
For esports; Valorant, Smash, Rocket League

Configuration Guides
For esports; Valorant, Smash, Rocket League

IT action plan document template
Google Docs or Microsoft Word

resume // cybersecurity

misc, code + plugins

minecraft spigot/bukkit plugins (2016)

Suppression
Dream Messages
Fount Of Evil
Out Come The Wolves

iPad app – Besonare (Swift; 2015)

Constella 3d game in Panda3d (2012)

multiplayer chat
model / solar system yaml load
wordpress-based auth system

more on github

All content copyright © Ralph Hogaboom unless otherwise noted.