Shawn Arnold (’17): Defending the Digital Frontlines of the U.S. Navy

As a cybersecurity engineer contracting for the U.S. Navy, Shawn Arnold (’17) plays a critical role in evaluating and authorizing the Navy’s most vital systems—from weapons platforms to payroll networks. His work ensures these systems meet the rigorous standards required for operation. He has also developed a method for quantifying cyber risk and vulnerabilities, which has become widely used within the Naval Information Warfare Systems Command (NAVWAR).

Thanks to his IWP education, Shawn approaches cyber as another warfighting domain like land, sea, air, and space—a domain where our adversaries are using age-old strategies.

In this alumni spotlight, Shawn discusses his interest in cyber security, his work in defensive cyber operations, and how his education helped shape his current work with NAVWAR.

A focus on nuclear and cyber – “the two most existential threats”

Shawn’s journey toward a career in cybersecurity began with a larger interest in international affairs.

His desire to pursue higher education in this area spurred him to join the U.S. Marine Corps, where he served for six years, including a deployment in support of Operation Iraqi Freedom. He earned numerous awards along the way, including the Navy Unit Commendation Medal.

After leaving active duty, Shawn used the GI Bill to pursue a B.A. in International Security and Conflict Resolutions at San Diego State University. It was there that he developed a deep interest in nuclear nonproliferation.

Following graduation, Shawn moved to D.C., fueled by the ambition “to save the world – like everyone else in D.C.!”

He had first heard about IWP from a guest speaker during class at SDSU and was attracted by its small class sizes and specialized courses, particularly on nonproliferation.

Once enrolled at IWP, Shawn learned more about cyber issues and eventually became heavily involved in IWP’s recently launched Cyber Intelligence Initiative.

“I remember thinking at the time that cyber and nuclear issues were my favorite because they are the two most existential threats to the world,” he said.

A career in cybersecurity with the U.S. Navy

Upon graduation from IWP, Shawn returned to San Diego, where his former Marine Corps Executive Officer hired him for a project for the NAVWAR CIO’s office (then called SPAWAR). There, Shawn conducted defensive cyber operations.

His team worked under the direction of U.S. Fleet Cyber Command, implementing cybersecurity protocols to protect the Department of Defense Information Network (DoDIN) – that is, everything related to information for the military.

During this time, Shawn developed a “Top 20” list of the most critical vulnerabilities in U.S. military information systems – and developed strategies to address them.

About three years ago, Shawn transitioned to the Risk Management Framework (RMF) team within the office of the CIO. Rather than responding to threats, Shawn now works to prevent vulnerabilities before they happen. He participates in the review and authorization process for systems that are used across the Navy before they go online.

In this role, Shawn developed a model for quantifying risk in a way that prioritizes cyber vulnerabilities. This method was later integrated into a broader project within NAVWAR to strengthen risk management across the Navy, expanding the impact of Shawn’s work.

Despite his important contributions in quantifying risk, Shawn feels that his greatest achievements thus far have been hiring and mentoring the next generation of cybersecurity professionals.

Context and purpose for cybersecurity work

Shawn credits his IWP education with giving him a strategic perspective on why his daily work truly matters.

“Geopolitical risk and cyber are directly related,” said Shawn. “Understanding our adversaries gives background and meaning to my work. I know how much even seemingly mundane tasks matter.”

At IWP, Shawn learned that cyber is just another domain of warfare, like land, sea, air, and space.

“We sometimes treat cyber like it is something new and special,” said Shawn. “But it’s part of something that has been going on forever. Militaries have thought about preparing battlefields for a very long time. Cyber is just a quieter battlefield. There are a lot of vulnerabilities. An adversary can get into a network and not exploit it until they need to. China has been working on this for 25 years.”

Advice for Aspiring Cybersecurity Professionals

For current IWP students considering a career in cybersecurity, Shawn offers practical guidance:

• Pursue certifications: Technical credentials complement a strategic education.
• Stay ahead of AI trends: Understanding the role of artificial intelligence will be key in the near future.
• Invest in relationships: Building connections with professors and peers at IWP can open doors and provide lasting value.