Cybersecurity Thought Leadership from a 28-Year Industry Veteran
John Gormally has spent 28 years in enterprise cybersecurity, from marketing and selling security for Cisco, Citrix, BlackBerry, IBM and Symantec to creating a university malware research study. Today he helps MSPs, IT providers and security firms turn that experience into content buyers trust.
Cybersecurity Expert Credentials and Recognition
- Award: Runner-up, Cybersecurity of the Year, San Diego Business Journal (2014), sponsored by California State University San Marcos.
- Malware Research Study: created and instructed a five-week partnership between Trusteer and the California State University system that taught students malware detection and INFOSEC policy across Mac, PC and mobile.
- Curriculum: co-authored graduate cybersecurity curriculum at Cal State San Marcos.
- Industry experience: 28 years in enterprise security sales and marketing, including Cisco, Citrix, BlackBerry, IBM, Symantec and Trusteer.
- Speaking: Cybersecurity Today and Tomorrow, FBI InfraGard, Las Vegas (2005). Also a speaker at ISSA and ISACA.
- Military service: U.S. Marine Corps veteran (1982 to 1988): communications specialist, platoon leader and cryptography custodian with a Final Secret clearance.
- Education: post-graduate certificates in information security and the Internet of Things from MIT.
Cybersecurity Content Marketing for MSPs and IT Providers
Security buyers cannot easily judge technical quality, so they judge trust. Content written by someone who understands both the threat and the buyer builds that trust before the first sales call. The Main Street CMO writes cybersecurity blogs, whitepapers and thought leadership articles for MSPs, IT providers and security firms, then optimizes them so Google and AI assistants can find and cite them.
- Thought leadership articles and blogs: expert-led posts that explain threats and policy in plain language.
- Whitepapers and guides: long-form pieces that give prospects a reason to start a conversation.
- SEO and AEO: content structured for search rankings and AI answers. See our AEO services.
- Email follow-up: campaigns that move readers from article to conversation.
Explore the full range of content marketing services, or learn how a fractional CMO can run the whole program.
Cybersecurity Speaker and Expert Source: Topics John Can Cover
Reporters, event organizers and podcast hosts can reach John through the contact page. He can speak or be quoted on:
- How malware spreads and how organizations can stop it
- Cybersecurity marketing: how MSPs and security vendors earn buyer trust
- AI security and governance, including adversarial AI and large language model risk
- Teaching security policy to non-technical employees
- How security products are sold, and where buyers get misled
- The veteran perspective on cyber defense and clear communication
Published Cybersecurity Commentary
John’s cybersecurity articles have been syndicated on Security Boulevard, a cybersecurity news and community site. Selected pieces:
- Risk and Reward of APIs and Third-Party Connectors in the Cloud (2024): why APIs and third-party connectors drive cloud growth, and the security risk they add. Commentary from Rohan Bafna, SecOps Engineer.
- Staying Ahead of Adversarial AI with Incident Response Automation (2024): how security teams can use automation, consolidated telemetry and AI tooling to keep pace with AI-driven attacks. Security engineering commentary from Rohan Bafna, SecOps Engineer.
- Assessing Duplication of Security Controls (2024): how the rush to deploy zero trust, XDR and cloud security tools during the remote-work shift left many organizations with overlapping controls worth reviewing.
- Is Cisco’s Acquisition of Splunk a Shade of Brilliance or Madness? (2023): why tech acquisitions are often about shaping the future more than solving today’s threats, with Cisco and Splunk as the case study.
- Meet Hackie-AI, The New Kid on the Block (2023): a look at AI-driven attackers that may one day replace human hackers.
- So, How is your LLM Today? (2025): why AI governance deserves attention as DeepSeek reshapes expectations for AI tools.
See every article on John’s Security Boulevard author page.
Cybersecurity Thought Leadership FAQ
What is cybersecurity thought leadership?
Cybersecurity thought leadership is original, experience-backed insight on security topics, shared through articles, whitepapers, talks and expert commentary, that earns trust from buyers, journalists and peers. It shows how you think, not just what you sell.
Why does thought leadership matter for MSPs and security firms?
Security is hard for buyers to evaluate, so they lean on credibility. Consistent expert content, speaking and media mentions build that credibility before a prospect ever books a call.
How does malware spread?
Common routes include links on social media, drive-by downloads from compromised websites, and exploits of vulnerable applications. Prevention combines patching, staff training and clear written security policy across Mac, PC and mobile devices, the approach taught in the Malware Research Study John created.
Can reporters interview or quote John, and is he available as a cybersecurity speaker?
Yes. Journalists, podcast hosts and event organizers can reach John through the contact page. He has presented to InfraGard, ISSA and ISACA.
Does John write cybersecurity content for clients?
Yes. The Main Street CMO writes cybersecurity blogs, whitepapers and thought leadership articles for MSPs, IT providers and security firms, with SEO and AEO built in.
More About John
Read the full story on the About page or connect on LinkedIn. Outside client work, John writes the Jack Kendall military cyber-thrillers as Patrick Greenwood at patrickgreenwoodbooks.com.
What Tech and Cybersecurity Clients Say
★★★★★ 5.0 on Google
Exceptional content and blog writing — highly recommend. We hired John for content and blog writing services, and the experience exceeded our expectations. What stood out most was his hands-on approach — he wasn’t just executing a brief, he was genuinely invested in getting the content right. His background in tech, and particularly cybersecurity, made a real difference. He didn’t just write about the subject matter, he clearly understood it, which meant the content had real depth and credibility instead of feeling generic or surface-level. Professional from start to finish — responsive, reliable, and easy to work with. If you need someone who can write authoritatively on technical topics without sacrificing readability, I’d recommend him without hesitation.
Alex Hisa, Google review
I’ve worked alongside John in tech for 25+ years, and I’ve watched him solve a problem that trips up most marketing agencies: they don’t speak the language of technology, or worse, they don’t understand the business problem the technology actually solves. As a tech-focused business owner, I can tell you that gap is expensive. Your message gets diluted. Your buyers don’t understand the real value. John doesn’t have that problem. What sets him apart isn’t just that he understands the tech. It’s that he understands how to translate it; to find the actual business implication buried in the features and make it click for your audience. That’s harder than it sounds, and most agencies can’t do it. Marketing orchestration at this level requires someone who thinks like both a technologist and a strategist. John does. If you’re a tech business tired of watching your marketing miss the mark because your agency doesn’t get what you do, contact him. The difference is immediate and measurable.
Michael Kennedy, Google review