May Mitchell Built a Career on the Power of Three

Before May Mitchell had a marketing title, she had a technical problem. She was a full-time intern at Lockheed Martin, working around global positioning systems while studying computer science. The company helped pay her tuition. Her days belonged to development and project management, the orderly country of specifications and deliverables. Yet the career that followed would unfold in the more unruly territory between a product and the people expected to understand it.

Mitchell grew up in Chicago, the youngest of four girls. Her three older sisters studied engineering, so maths and science did not arrive as alien customs. She liked problem-solving, clubs and team sports. The mix mattered. Code offered logic; sport supplied competition and cooperation. Technology marketing would eventually ask for both.

A sponsor at Lockheed helped her cross into a sales role at Fujitsu. It was an early lesson in the compound interest of someone opening a door. Mitchell has returned to that subject often, especially when discussing women in technology: talent matters, but so do advocates, visible assignments and the person willing to say a name in a consequential room.

I. The first translationWhere the engineer met the seller

The move into sales did not discard the engineer. It gave her a second language. By 2001, Mitchell was at McAfee in go-to-market planning and solutions marketing. Then came Websense, later Forcepoint; IronKey; MaaS360; Symantec; Cylance; iboss; Open Systems and Ontinue; HUMAN Security; and Qualys. Read in sequence, the employers form a compact history of modern cybersecurity. The perimeter shifted from office networks to mobile devices, the cloud and remote work. Endpoint security embraced machine learning. SASE, managed detection and response, bot defense and risk operations became fresh categories requiring fresh explanations.

That itinerary can make Mitchell look like a collector of fashionable acronyms. Her public record suggests something more consistent. She specializes in the hinge: the place where an intricate system becomes a customer journey, a partner program or a sales motion. At Symantec, she described a worldwide field organization aligned with sales across the Americas, Europe, the Middle East, Africa and Asia-Pacific. The work was less about polishing a slogan than coordinating many people who each held a different piece of the customer.

Her counsel from that period was impatient in the useful sense. Get the program to a point where the team feels good about it. Be flexible. Execute. If the result disappoints, find the cause, adjust and go again. She compressed the philosophy into three words: “Activity drives results.” The line could sound like a gym poster. In context, it is an argument against the expensive comfort of permanent planning.

II. Three is a strategyThe shortest useful meeting agenda

Mitchell's neatest management device is the power of three. Sales and marketing leaders begin with shared goals. The broader team agrees on no more than three priorities, then attaches sales targets to them. The number is small enough to remember and large enough to make trade-offs visible. A messaging platform might become one priority, supported by three proof points. Regions can adapt the plan to their markets without inventing a different company.

1. Choose three priorities. A short list exposes what the organization is truly prepared to leave out.
2. Put numbers beside them. Shared targets turn alignment from a warm feeling into an operating agreement.
3. Let the market answer. Launch, inspect the result, change what failed and run the next version.

Partners belong inside this system, not at its far end. Mitchell has argued that they bring competitive intelligence, practical feedback and a view of customer objections that headquarters cannot simulate. At Symantec, she wanted partners briefed as much as six months before product launches. At iboss, she said realistic goals should be established before a partnership is announced. At Ontinue, half of the partner-program budget went toward creating pipeline with alliance and channel partners.

This is also why Mitchell's career has survived so many category changes. Products move. Distribution changes shape. Buyers conduct more of their research before they speak to a vendor. But the social machinery remains: trust, proof, timing and people with incentives that must line up. Mitchell's job has been to make the machinery legible.

III. Twelve weeksA new company before the calendar could object

The clearest demonstration came at Ontinue. Open Systems' managed detection and response division needed to become a company with its own name and posture. Mitchell led a complete brand overhaul in 12 weeks: logo, website, assets and identity. Within her first eight months, the list also included a partner program, three product introductions and a campaign supporting a major acquisition.

Speed on that scale can produce a handsome shell with nothing behind it. Ontinue's launch paired identity with the systems that would carry it: messaging, products, partners and demand generation. Geoff Haydon, the company's chief executive, credited Mitchell with locking down the message and helping the new brand stand apart in a crowded managed-security market. The useful detail is the verb. She did not merely describe a company. She helped assemble the conditions under which other people could sell, buy and remember it.

The work earned her a second consecutive OnCon Top 50 Marketer recognition in 2023. Her Qualys biography now records three consecutive OnCon awards, 13 consecutive years among CRN's Power 100 Women of the Channel and inclusion in CyberScoop's Top Women in Cybersecurity. Earlier, when iboss announced her arrival in 2020, it credited her with involvement in more than 30 mergers and acquisitions and 150 product launches.

Numbers of that size invite mythology. Mitchell's own comments keep dragging the story back to the shop floor: listen to partners, simplify the trial, make it easy to buy, set a target, revise. The résumé is grand; the method is made of chores.

IV. The other career ladderFour sisters, two daughters and the missing middle

Work did not proceed in a sealed compartment. On a flight home from a business trip, Mitchell met the man she would marry. When she told the story in 2017, they had been married for 22 years and their two daughters were in college. Both daughters later pursued careers in technology. The line from three engineer sisters to a computer-science student to two more women in tech looks almost tidy enough to be destiny. Mitchell does not treat it that way.

She has written about the “missing middle,” the mid-career stretch where capable women lose momentum amid caregiving demands, rigid structures and uneven sponsorship. Her interest is personal and operational. She knows the ambition of building a career and a family at once. She also knows what a sponsor changed in her own first act.

Her prescription is not ceremonial encouragement. It is access to strategic projects, useful feedback, flexibility and senior people willing to advocate. In March 2026, writing about International Women's Day, she framed legacy as something built in meetings and hiring decisions. That is a notably unsentimental definition. A leader's values live in the allocation of opportunity.

There is humor tucked into her view of leadership too. When an industry survey asked executives to name their superpower, Mitchell began, “Just one?” The joke works because the serious answer to career longevity is plural: technical fluency, commercial instinct, stamina, sponsors, teams and the nerve to start again under a new logo.

V. One motionThe Qualys assignment

Mitchell joined Qualys as chief marketing officer in July 2025. The company was 25 years into its own journey from cloud-security pioneer to a broad platform spanning asset visibility, vulnerability management, compliance, cloud and application security. Her brief covered worldwide marketing and pipeline, working closely with sales and partners. Her phrase for the assignment was “one GTM motion.”

The message she inherited was Risk Operations Center, or ROC: a model intended to pull visibility, prioritization and remediation into one operating view. In Pune, after ten days with the company's teams, she called the city an epicenter of that work and praised colleagues as humble, curious and passionate. In Brazil she thanked partners for investing in the strategy. At a 2026 public-sector program, she connected risk operations to federal missions, Zero Trust and automation. At Black Hat, she took viewers through a booth built around rapid detection, prioritization and remediation.

These appearances are marketing, certainly. They also reveal the recurring construction of her career. A large technical portfolio needs a memorable organizing idea. The sales organization needs proof. Partners need a role with economics behind it. Customers need the complexity reduced without having the risk waved away.

Mitchell has spent a quarter-century near cybersecurity's moving edge, but her method is stubbornly human. Find the three things that matter. Put everyone in the planning room. Give the work a number. Make the next step easy. Then move before the meeting breeds another meeting.