The U.S. Department of Energy has appointed Andrew McClure to lead the Office of Cybersecurity, Energy Security, and Emergency Response (CESER), the office charged with protecting America’s energy infrastructure from cyber and physical threats.
As Director, McClure will oversee efforts to harden critical infrastructure, strengthen preparedness and emergency response capabilities, and build partnerships across federal, state, local, and private-sector stakeholders. The role sits at the center of the nation’s push to secure energy systems against an evolving threat landscape — from ransomware and nation-state intrusions to physical attacks on the grid.
“Andrew’s background in national security, cybersecurity, and emerging technology makes him exceptionally qualified to lead CESER,” said James P. Danly, Deputy Secretary of Energy. “As threats to our energy systems continue to evolve, his experience will strengthen our efforts to harden critical infrastructure, enhance preparedness, emergency response, and deepen partnerships across industry and government to deliver affordable, reliable, and secure energy to American families and industries.”

A career spanning defense, intelligence, and venture capital
McClure brings an unusual blend of experience to the role. He spent more than a decade as a venture capitalist, most recently at Forgepoint Capital, where he focused on cybersecurity and infrastructure software — backing entrepreneurs building technologies to defend enterprises against cyber threats. He’s also a Founding Investor at Surefire Cyber, Converge Insurance, and CyberCube, and has accumulated more than 30 years of combined board director experience.
Before his time in the private sector, McClure served as an intelligence officer in the U.S. Marine Corps, leading cross-functional teams in signals intelligence and cyber operations across Afghanistan, the Middle East, East Africa, and Australia. He remains active in the Marine Corps Reserve today.
His academic background is equally wide-ranging: a Master of Public Administration from Harvard Kennedy School, an MBA from MIT Sloan, a Master of Strategic Studies from the Australian National University, and a Bachelor of Science in Astrophysics from the U.S. Naval Academy.
Emily Burdick, who has served as Acting Director and been an instrumental leader within CESER, will continue in her role as Principal Deputy Director, working alongside McClure to advance the office’s mission of strengthening the security and resilience of the energy sector.
McClure’s appointment comes as CESER continues its work to safeguard the nation’s energy systems in support of the Department of Energy’s broader mission under Secretary Chris Wright to restore American energy dominance while protecting critical infrastructure from an increasingly complex mix of cyber and physical threats.
Andrew McClure Named Director of the Office of Cybersecurity, Energy Security, and Emergency Response (CESER)
McClure will oversee efforts to harden critical infrastructure, strengthen preparedness and emergency response capabilities, and build partnerships across federal, state, local, and private-sector stakeholders.
Coordinated Cyberattacks Hit Dozens of Minnesota Water Utilities, Raising Questions of Link to T-Mobile Outage
State and federal agencies are investigating intrusions that disrupted automated controls at municipal water and wastewater systems, and some OT experts are asking whether the attacks were timed to coincide with the same-day T-Mobile 5G outage.
SecurityWeek Launches Critical Impact Awards to Recognize Excellence in Industrial Cybersecurity
Independently judged. Sponsor-neutral. Winners announced live at the 2026 ICS Cybersecurity Conference.
Podcast With Mike Holcomb: Beyond OT Visibility – Trust, Consequence, and the Next Wave of Industrial Cyber Risk
In this SecurityWeek podcast, Brian Schleifer is joined by Mike Holcomb, one of the most recognizable voices in OT and ICS cybersecurity.
Nozomi Networks Raises $100 Million in Series E Funding
Nozomi Networks announced a $100 million Series E funding round, bringing the total amount raised by the company to more than $250 million.
Rockwell Automation to Acquire ICS/OT Security Firm Verve Industrial
Industrial giant Rockwell Automation announced on Monday that it has signed a definitive agreement to acquire Verve Industrial Protection, a cybersecurity company specializing in industrial control systems (ICS) and operational technology (OT). Verve’s managed OT/ICS security platform provides asset inventory, vulnerability management, patch management, configuration management, SIEM, incident response, and backup and restore capabilities. In addition, the company provides network segmentation, vulnerability assessment, system hardening, automation engineering, and consulting services. The deal enables Rockwell Automation to expand and strengthen its offering. Financial details have
Radiflow, Cyolo Team Up to Secure OT Networks Against Unauthorized Devices
Radiflow and Cyolo partnership will allow organizations implement a seamless, single sign-on experience for remote and third-party vendors, while significantly enhancing network security.
Schneider Electric Teams With BitSight on OT Risk Detection
Schneider Electric partnered with BitSight to develop a OT risk identification and threat intelligence capability
Deep Dive: PIPEDREAM/Incontroller ICS Attack Framework
In this session, Mark Plemmons, Sr. Director for Threat Intelligence at Dragos, dives deep into the technical details and real-world impact on the modular ICS attack framework known as PIPEDREAM/Incontroller
Industrial Control Systems Cybersecurity Training Act Passed by House of Representatives
Industrial Control Systems Cybersecurity Training Act.
