BSidesSF 2025: Full Schedule

11:15am PDT

AppSec as Glue: Building Partnerships to Scale Security

Saturday April 26, 2025 11:15am - 12:00pm PDT

Join AppSec leaders from Chime, Twilio, Rippling, and (ex)Snowflake to explore how successful security teams act as organizational glue. Learn how to scale security impact by building essential partnerships across platform engineering, compliance, threat detection teams, and more!

Speakers

Mukund Sarma

Chime

A Security generalist with hands-on experience in Application Security, Security Architecture, and Platform Security. I enjoy building security programs and I've had some experience doing so. I'm currently the Senior Director of Product Security at Chime. In this capacity, I oversee... Read More →

Tad Whitaker

Sarah Liu

Twilio

Sarah is a Staff Application Security Engineer at Twilio. She has a broad scope of experience in various industries, including telecom, finance, and entertainment. Her roots are in Software Engineering and she enjoys collaborating directly with engineers. She currently leads the Bug... Read More →

Ariel Shin

Ariel is an Application Security Manager, leading a team dedicated to eliminating security vulnerabilities by equipping developers with secure training, design practices, and secure defaults. Previously, Ariel managed the Product Security team at Twilio and played a key role in promoting... Read More →

Jacob Salassi

Former director of Product Security at Snowflake. Led Snowflake's pre- & post IPO transformation from a bottlenecked, security engineer centric process that slowed teams down to a developer owned security process that ships features faster and more securely. My teams & I handled security... Read More →

Saturday April 26, 2025 11:15am - 12:00pm PDT
AMC Theatre 13 AMC at Metreon

Panel

1:00pm PDT

Cloud Security Podcast - LIVE!

Saturday April 26, 2025 1:00pm - 1:45pm PDT

AMC Theatre 13

AI Security 101: Securing Cloud-Native AI Systems & Building Modern SOCs

AI is reshaping security faster than cloud ever did. This panel explores real-world threat models, building AI-first SOC teams, and the gaps legacy tools can't fill.

Learn what it takes to secure, monitor, and respond to threats in AI systems directly from those doing it.

Speakers

Ashish Rajan

Cloud Security Podcast, CISO

Ashish Rajan is the host of the wildly popular Cloud Security Podcast, a CISO, and an outspoken opinion leader on all things Cloud Security. He is an early stage investor, mentor, SANS Trainer and is a frequent contributor on topics related to public cloud transformation and the associated... Read More →

Jackie Bow

Technical Staff, Anthropic

A Jackie-of-all- trades, master of some, Jackie seems to be physically unable to stop returning to threat detection and response. Her 15 years in the industry have been spent across multiple disciplines including malware analysis, reverse engineering, infrastructure and product security... Read More →

Kane Narraway

Kane is a technical engineering manager with an unwavering passion for all things IT security. With over a decade of experience in building (and breaking) corporate networks. Kane dabbled in the realms of IT, red teaming and DFIR before going on to lead the enterprise security teams... Read More →

Saturday April 26, 2025 1:00pm - 1:45pm PDT
AMC Theatre 13 AMC at Metreon

Panel, Podcast

2:00pm PDT

Future-Proof Your Career: Evolving in the Age of AI

Saturday April 26, 2025 2:00pm - 2:45pm PDT

AMC Theatre 13

Discover how AI is reshaping cybersecurity careers in this dynamic panel discussion. Join industry experts as they tackle pressing questions about AI-driven skills, job evolution, and adapting to an ever-changing landscape. Gain actionable insights to future-proof your career!

Speakers

Jay Sarwate

Student, Prospect High School

I’m a dedicated high school student with a strong passion for computer science, especially in the areas of artificial intelligence and machine learning. I recently attended the AI/ML summer program at UCSD’s COSMOS, where I explored machine learning concepts and worked on hands-on... Read More →

Alok Tongaonkar

Senior Director Data Science, Palo Alto Networks

Alok Tongaonkar is a cybersecurity and AI leader with over 15 years of experience driving AI innovation and securing enterprise systems. As Senior Director of Data Science at Palo Alto Networks, he has led AI transformation and developed groundbreaking AI-first security solutions... Read More →

Prutha Parikh

Cohere

Prutha Parikh is Head of Security at Cohere, the leading security-first enterprise AI company. She is a cybersecurity leader with over 18 years of experience building security products and scaling information security programs at enterprises and startups. Her areas of expertise span... Read More →

Ketan Nilangekar

CEO and Co-founder, ThreatWorx

Ketan Nilangekar is a seasoned technologist, leader, and entrepreneur with over 20 years of experience in developing innovative solutions across cybersecurity, networking, and storage software. As the CEO and co-founder of ThreatWorx, he is focused on building the next-generation... Read More →

Saturday April 26, 2025 2:00pm - 2:45pm PDT
AMC Theatre 13 AMC at Metreon

Panel

3:00pm PDT

Uncharted Minds: Exploring Neuroscience, Burnout, and Cognitive Strengths

Saturday April 26, 2025 3:00pm - 3:45pm PDT

AMC Theatre 13

The human mind is both a strength and a vulnerability in cybersecurity. This panel explores the neuroscientific roots of burnout and examines how cognitive load, stress, and mental resilience impact cybersecurity professionals, offering fresh strategies to tackle the complexities of cyber threats.

Speakers

Peter Coroneos

Founder, Cybermindz.org

Peter Coroneos is a globally recognised cyber policy leader and the founder of Cybermindz.org, a not-for-profit organisation dedicated to supporting the mental wellbeing of cybersecurity professionals. With over 25 years of experience in the field, including serving as CEO of Australia’s... Read More →

Deidre Diamond

Founder & CEO, CyberSN

Deidre Diamond is the Founder and CEO of CyberSN, specializing in cybersecurity workforce risk management and strategic talent acquisition. Deidre Diamond launched her career straight out of college, guided by two pioneering entrepreneurs who employed her and provided growth opportunities... Read More →

Kayla Williams

Saturday April 26, 2025 3:00pm - 3:45pm PDT
AMC Theatre 13 AMC at Metreon

Panel

4:00pm PDT

Secure Designs, UX Dragons, Vuln Dungeons - Application Security Weekly

Saturday April 26, 2025 4:00pm - 4:45pm PDT

AMC Theatre 13

Live recording for the Application Security Weekly podcast. We’ll explore the factors that influence a secure design, the challenges that influence security trade-offs, and the developer needs that influence security. Visit securityweekly.com/asw to see the episode archive and subscribe!

Speakers

Mike Shema

Application Security Weekly

Mike listens to synthwave, plays D&D, and hosts the Application Security Weekly podcast.

Kalyani Pawar

Saturday April 26, 2025 4:00pm - 4:45pm PDT
AMC Theatre 13 AMC at Metreon

Panel, Podcast

5:00pm PDT

Can Cyber Mercenaries and Human Rights Coexist?

Saturday April 26, 2025 5:00pm - 5:45pm PDT

AMC Theatre 13

Cyber Mercenaries have become a favorite tactic of nation states around the world in the past decade. They spy on activists, civil society, and journalists. They work with countries that have no regard for human rights. This panel of infosec leaders will discuss the problem and potential solutions.

Speakers

Bill Marczak

Cooper Quintin

Sr. Staff Technologist, Electronic Frontier Foundation

Cooper is a Senior Security Researcher at the EFF Threat Lab. He has worked on projects such as Privacy Badger, Canary Watch, and analysis of state sponsored malware, IMSI catchers, and other digital attacks on activists, journalists, and human rights defenders. He has also performed... Read More →

Eva Galperin

Director of Cybersecurity, Electronic Frontier Foundation

Eva Galperin is the Director of Cybersecurity at the Electronic Frontier Foundation (EFF) and technical advisor for the Freedom of the Press Foundation. She is noted for her extensive work in protecting global privacy and free speech and for her research on malware and nation-state... Read More →

Saturday April 26, 2025 5:00pm - 5:45pm PDT
AMC Theatre 13 AMC at Metreon

Panel

11:30am PDT

Mind the Gap: Career Growth and Management for Security Engineers

Sunday April 27, 2025 11:30am - 12:15pm PDT

AMC Theatre 13

Join us as we discuss the good, the bad, and the ugly of career management in security engineering! Our panel of engineers and leaders will share stories about identifying opportunities, overcoming challenges, and setting yourself up for long-term success in the security industry.

Speakers

Josh Liburdi

Principal Engineer, Security Operations, DoorDash

Josh Liburdi is a security engineer at DoorDash who focuses on security operations. He has more than a decade of industry experience and has worked at several diverse organizations, including Brex, Target, and CrowdStrike. He also presents at security conferences (BSides NYC & SF... Read More →

Elle McKenna

security + IT leader, somewhere smallish :)

i’m a nonbinary person (they/them) based in oakland, ca. i’m passionate about creating shareholder value, and in my free time i like to create shareholder value. i would love it if people talked to me about creating shareholder value; ask me about business, numbers, charts!

Sarai Rosenberg

Head of Cloud Security ☁️🔒, Netflix

Sarai Rosenberg leads Netflix Clod Security. Sarai became an expert on managing people (YES IT'S WEIRD TO SAY THAT) due to her passion for equitably enabling her teams to do their best work, and her bizarre collection of special interests. As a mathematician, she's excited by untangling... Read More →

Andrew Kline

Senior Security Engineer, Brex

Andrew is a security engineer at Brex where he does D&R and cloud/infrastructure security. He started his career in security consulting, primarily at Crypsis/Unit 42 (PANW), where he handled a variety incidents and security engineering projects for clients before launching an internal... Read More →

Sunday April 27, 2025 11:30am - 12:15pm PDT
AMC Theatre 13 AMC at Metreon

Panel

1:15pm PDT

State of (Absolute) AppSec

Sunday April 27, 2025 1:15pm - 2:00pm PDT

AMC Theatre 13

Join Seth Law (@sethlaw) and Ken Johnson (@cktricky), co-hosts of the Absolute AppSec Podcast, for a panel discussion on the current state of application and product security for 2025.

Speakers

Seth Law

Ariel Shin

Lakshmi Sudheer

Engineering Manager, AppSec, Netflix

Lakshmi currently leads Netflix’s Application Security team. She has over a decade of security experience and has presented at numerous conferences, including AppSec USA and DEF CON. She’s a strong proponent of “secure-by-default” practices and crowdsourced security, and she’s... Read More →

Ken Johnson

CTO & Co-Founder, DryRun Security

Ken Johnson has been hacking web applications professionally for 14 years and given security training for 11 of those years. Ken is both a breaker and builder and is the CTO & Co-Founder of DryRun Security. Previously, Ken was a Director with GitHub's Product Security Engineering... Read More →

Sunday April 27, 2025 1:15pm - 2:00pm PDT
AMC Theatre 13 AMC at Metreon

Panel

2:15pm PDT

CISO Series Podcast - LIVE!

Sunday April 27, 2025 2:15pm - 3:00pm PDT

AMC Theatre 13

Live audience recording of the CISO Series Podcast packed with CISO debate, questions from the audience, "What's Worse?!," and last year's favorite, "What is Dave's Mom Talking About?"

Note: This talk begins with a quick photo with the audience; they will ask if anyone is uncomfortable with it. Overflow will not be photographed.

Speakers

David Spark

Producer, CISO Series

David Spark is the producer of the CISO Series, a media channel of blogs, podcasts, and videos all on the cybersecurity ecosystem. Less than a year old, the CISO Series has hit a nerve in the InfoSec industry as it has acted as a much needed mouthpiece for the dysfunctional yet much... Read More →

Andy Ellis

Alexandra Landegger

Sunday April 27, 2025 2:15pm - 3:00pm PDT
AMC Theatre 13 AMC at Metreon

Panel, Podcast

3:15pm PDT

15 Years of BSidesSF: Behind the Scenes AMA

Sunday April 27, 2025 3:15pm - 4:00pm PDT

AMC Theatre 13

After 15 years, we have more than few stories to share. Come hear how we've grown (and survived) from a panel of our most experienced BSidesSF organizing veterans.

Speakers

Reed Loden

Reed Loden is an information security expert, researcher, hacker, and developer. With over 15+ years of security experience, he focuses on protecting the products and services of various organizations.Reed has worked to secure companies including Teleport, HackerOne, Lookout Mobile... Read More →

Ricky

Organizer, Security Generalist, BSidesSF

Steve

Steve Sekiguchi, a seasoned hacker, information security expert, researcher, and developer, possesses over four decades of experience in the field. His expertise lies in anticipating emerging trends and providing organizations with the requisite knowledge and awareness to safeguard... Read More →

Tania McClain

Senior Account Executive, GuidePoint Security

Over 25 years experience helping clients and partners in IT & IT Security. My passion lies in connecting teams with the right contacts/experts and/or solutions to make everyone's lives easier.When I'm not working, I like to take my RV out, hang out with friends, and listen to live... Read More →

Meghan Manfre

Sunday April 27, 2025 3:15pm - 4:00pm PDT
AMC Theatre 13 AMC at Metreon

Panel

4:15pm PDT

Slaying Dragons Together: Multidisciplinary Solutions to Security Issues

Sunday April 27, 2025 4:15pm - 5:00pm PDT

AMC Theatre 13

Tired of facing the same dragons alone? Join MITRE security and strategy experts to explore how collaborative models and teams can help you tackle your biggest challenges, turning individual lessons learned into repeatable community wins. Build a winning battalion and collective battle plan.

Speakers

Panel