Karen Scarfone
Clifton, Virginia, United States
Summary
👤
SeniorKaren Scarfone is a seasoned cybersecurity architect, author, and co-founder of Trusted Cyber Annex, renowned for turning complex security concepts into practical, implementable guidance. She supported NIST for over two decades and co-authored foundational standards and guidance, including CSF 2.0, the Secure Software Development Framework, and the Common Vulnerability Scoring System. As Principal Consultant at Scarfone Cybersecurity since 2011 and now leading Trusted Cyber Annex, she helps organizations design resilient security architectures while shaping policy-aligned security programs. Her training spans computer science and technical writing, holding an MS in CS from the University of Idaho as well as an MS in English (Technical Writing), with additional study at Carnegie Mellon. Based in Clifton, Virginia, she has authored hundreds of articles and contributed to 21 cybersecurity books, and maintains writing portfolios at scarfonecybersecurity.com and tcannex.com.
9 years of coding experience
Github Skills (17)
nist10
xml10
shutdown9
json9
security9
authorization9
schema9
yaml9
compliance9
automation7
risk-assessment5
cybersecurity5
security-testing4
security-automation2
security-scanner2
Programming languages (2)
Github contributions (5)
fractional-ciso/NIST-Cybersecurity-Documents
Jan 2019 - Jan 2019
Source for NIST cybersecurity documents during government shutdown
Contributions:28 commits, 21 pushes in 3 days
nistshutdownsecuritycybersecuritygovernment
kscarf1/OSCAL-1
Apr 2018 - May 2018
Open Security Controls Assessment Language
Contributions:2 PRs, 10 pushes, 2 branches in 28 days
security-controlsvulnerabilitiessecuritysecurity-testingrisk-assessment
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.