AI
The AppSec Poverty Line: Minimal Viable Security
application securitysecurity leadership
Topic
Security Leadership
Building and running a security org — CISO strategy, hiring, culture, executive communication, and security architecture at scale.
- CISO strategy
- security program building
- security budgeting
- security hiring
- team building
- security culture
- executive communication
- board presentations
- security metrics
- vendor evaluation
- security architecture
- managed security services
- security operations strategy
- burnout
- career development
51
Talks
6
Conferences
BSidesSF 2026
16 talks💎 More Role Models in AppSec: How to Get It Right
application securitysecurity leadership
📗 You Just Might Find, You Get What You Need: How MS Became My Unlikely Success Story
security leadership
📙 Level Up Your Threat Modeling: Turning Security Into a Team Adventure 🖥️
application securitysecurity leadership
CISO Series Live Podcast Recording
security leadershipgovernance and riskai security
📙 From Auditions to Opening Night: Selecting Security Tools that hits the high notes 💼
security leadership
📙 We Pwn the Night: Growing & Leading an 31337 security research team 💼
security leadershipoffensive security
Let's Do the Timewarp Again! A Look Back to Move Forward
security leadershipgovernance and risk
💎 Elevating First-Time Female Voices on Stage
security leadership
📙 Power Dynamics in Security Leadership: a legato leitmotif lullaby on leading lightly and luminously 💼
security leadership
📙 How to sell your soul, err, your security program 💼
security leadership
📗 The Epistemology of Trust 💼
security leadershipgovernance and risk
📗 Building an open source security project with 1M+ installations ⚖️
identity and accessgovernance and risksecurity leadership
💎 Practice Cyber Skills Like a Musician
security leadership
📗 You’re Gonna Be Popular: Why They’re Getting a Callback and You’re Not
security leadership
📙 Security on a Shoestring: A Low-Budget Security Revival Tour 🖥️
governance and risksecurity leadership
NDC Security 2026
1 talkWhat we can learn from the World's Biggest Heists
offensive securitysecurity leadership
OWASP Global AppSec USA 2025
7 talksThe Future of AppSec is Continuous Context (Keynote)
ai securityapplication securitysecurity leadership
The SCA Balancing Act
application securitysecurity leadership
Stop Trying to "Manage Risk" (Keynote)
governance and risksecurity leadership
Two Paths to Security Upskilling: Startup and Enterprise
security leadershipapplication security
Security Champions at Scale: Transforming Security Culture by Aligning Incentives and Gamification
security leadershipapplication security
Beyond the Checklist: Building an AppSec Culture That Engineers Don't Dread
application securitysecurity leadership
From Soft Skills to Hard Data: Measuring the Impact of Culture and Security Champions
application securitysecurity leadership
DEF CON® 33 Hacking Conference
13 talksWelcome to DEF CON 33!
security leadership
The Price for Progress: Ethical Cybersecurity and Tech-Driven Communities
governance and risksecurity leadershipai security
Passing the Torch: Mentoring and Protecting Our Students in Education Spaces
defensive securitygovernance and risksecurity leadership
Quiet Confidence: An Introvert's Journey to Technical Public Speaking
security leadership
Hacker vs. Triage: Inside the Bug Bounty Battleground
offensive securitysecurity leadership
Dark Capabilities: When Tech Companies Become Threat Actors
governance and risksecurity leadershipoffensive security
Cyber Volunteering and Community Defense - DEF CON Franklin and the Cyber Resilience Corps 1 Year In
governance and risksecurity leadership
Breaking Down Bias in the Cyber Stack
security leadership
Voices from the Frontlines: Managing Bug Bounties at Scale
Gabriel Nitu, Jay Dancer, Tyson Laa Deng, Ryan Nolette, Goraksh Shinde, Jill "thejillboss" Moné-Corallo
offensive securitysecurity leadership
Cybersecurity in Latin America: The Untold Stories of Resilience & Innovation
security leadershipmalware and threat inteloffensive security
DEF CON Closing Ceremonies & Awards
security leadership
DC101 Panel
security leadership
DEF CON Groups (DCGs): Keeping the Signal Alive All Year Long
mobile and iot securitysecurity leadership
Black Hat USA 2025
2 talksThree Decades in Cybersecurity: Lessons Learned and What Comes Next
malware and threat intelsecurity leadership
Black Hat USA 2025 | Hacking the Status Quo: Tales From Leading Women in Cybersecurity
security leadership
OWASP Global AppSec USA 2024
12 talksHow to get developers to want to adopt AppSec
application securitysecurity leadership
OWASP: The Next 25 years
application securitysecurity leadershipgovernance and risk
Think Like a Hacker (Keynote and book signing)
offensive securitysecurity leadership
AppSec Meets Project Management: Hacking the Frameworks for Secure Software
application securitygovernance and risksecurity leadership
Thriving in the Age of AI (Keynote)
ai securitysecurity leadership
The Path to Influence: How Three Threat Modelers Can Influence an Entire Organization
application securitysecurity leadershipdefensive security
From Hype to Reality: The Broken State of DevSecOps and Its Maturity Model
application securitysecurity leadership
Breaking the Mold: Navigating the Intersection of Technology, Security, and Trust (Keynote)
security leadershipapplication security
From Start Line to Security Finish: Running Your Application Security Program Like a Marathon
application securitysecurity leadership
Who Hurt You? Earning the trust of developers
application securitysecurity leadership
Businesses Run On Risk And Debt: Why Communicating Security Risk Is Hard
security leadershipgovernance and risk
Learning from "edge of tomorrow" to build an effective security design review program
application securitysecurity leadership