Speakers

Ken Johnson "cktricky", has been hacking web applications professionally for 16 years. Ken is both a breaker and builder and is the CTO & Co-Founder of DryRun Security. Previously, Ken was a Director with GitHub's Product Security Engineering team and has held both technical and leadership roles both within the consulting world as well as a corporate defender. Previously, Ken has spoken about varying AppSec topics at RSA, You Sh0t the Sheriff, Insomnihack, CERN, DerbyCon, AppSec USA, AppSec DC, AppSec California, OWASP Global events, DevOpsDays DC, LASCON, RubyNation, and numerous other events. Ken's current passion project is the Absolute AppSec podcast with Seth Law and the practical secure code review course they offer thru DEF CON and other training venues.

Gerrit is a senior security engineer with 7 years of experience in GRC, AppSec, and cloud security across various sectors from non-profits to the DoW. He currently works as a Senior Security Engineer at BambooHR where he specializes in AI-agent and cloud security.

Aamir Lakhani is the Global Director Of Threat Intelligence and Adversarial Artificial Intelligence Research, focused on turning real attacker behavior into practical detection, automation, and resilience programs that hold up in messy enterprise environments. With more than 20 years in cybersecurity, he has led global threat intelligence initiatives, built security architectures for complex systems, and supported teams defending Fortune 500 organizations, public sector entities, and high consequence national security environments.

New chapter: I've joined Chainguard as a Senior Enterprise Solutions Engineer.

Anna Pratt is a senior security engineer at Deseret Mutual, a health insurance provider affiliated with the Church of Jesus Christ of Latter-day Saints. Her previous experience includes leading Incident Response and Threat Hunting at Brigham Young University, growing Application Security at a F500 company, and facilitating cybersecurity education groups. She holds both a bachelor's and master's degree in Cybersecurity. Anna chose a career in cybersecurity as a teenager when she realized she was very good at guessing the passwords of the people around her.

Currently an offensive security consultant. With a background in both red and blue teaming, I enjoy seeing what we can learn from each side of the same coin. In my free time I like to climb rocks and run.

Ben Wolfley began his cybersecurity career as a Cybersecurity Officer in the Utah National Guard and served as the executive officer for the Utah National Guard’s Cyber Protection Team. On the civilian side he worked and consulted across financial services, healthcare, big tech, and automotive, focusing on cloud security, application security, AI security, and AI-driven automation.

Bill Parr has spent over 28 years at Cisco, working as a solutions engineer and, more recently, leading teams of solutions engineers. Today he leads a team focused on delivering secure networking solutions to public sector customers. Networking is his home turf — he's an active CCIE in Enterprise Networking — and his interest in quantum comes from one place: what it means for the future of secure communications. He approaches this introductory session from that practical, networking-first perspective. Outside of work, Bill is a road cyclist and enjoys camping with his kids and grandkids.

Blake Entrekin is a cybersecurity and compliance leader with over 17 years of experience securing cloud-native and SaaS environments. Currently a Sr. Staff Security Engineer at Databricks, he has previously served as Deputy CISO at HackerOne and held leadership roles at Podium, Palo Alto Networks, and Adobe. Blake is a board member for the Salt Lake CISO community, and is a limited partner and advisor at Holly Ventures, a seed-stage cybersecurity fund.

Daniel Stapley is a high school senior, technology nerd, and a veteran volunteer of the Hardware Hacking Community. Although he doesn't have any certifications or career experience (yet), he knows a lot about the basics of cybersecurity and loves to discuss complex security issues. He's willing to tackle a challenge even if he knows nothing about it - because what better teacher can you have than failure?

Brendan Griffin is an information security research and cyberthreat intelligence leader with more than a decade of experience. He leads the N-able Threat Research team. His work at N-able encompasses threat detection development, intelligence provision, and novel explorations into emerging threats.

Brian Hoopes is the Head of Cyber Security and Fraud Prevention for Deseret Digital Media. He has worked in a variety of technical roles across Deseret Management Corporation companies throughout his many years with the company.

I have my bachelor's and master's in information systems. My masters from Utah State University. I started as a security analyst for a small pest control company and then transitioned to be a security engineer at Arctic Wolf after applying here at Saintcon 4 years ago.

Chris Honda stumbled into security after trying a dozen different career paths. He specializes in building Security and GRC programs from scratch, strives to give back as much and as often as he can, and is your biggest fan & cheerleader.

Chris has worked as a Senior Application Developer / Cybersecurity Analyst for almost two decades. Now he's shifted his focus into the AI space with all the foundational changes and security concerns that AI is bringing. Chris holds a CSSLP and is certified in AI for business.

Dr. Clinton Walker completed his doctorate in computer science from Louisiana State University, with his research focusing on the intersection of digital forensics and artificial intelligence. He has contributed to the development and authorship of several research publications in the digital forensics space. He currently works as a forensics analyst at the St. Martin Parish Sheriff’s Office where he processes and examines digital evidence relevant to various person, property, and societal crimes. Clinton is also a member of the Internet Crimes Against Children task force in the sheriff’s office and assists in investigations for this domain of crimes inside the parish. Prior to his focus in digital forensics, he worked in varying positions in the computer science space which included areas such as software development, computer vision, and data science.

Devin Thelin (Crypt1d) is a cybersecurity, privacy, and AI governance leader

David is a Principal Cybersecurity Research Engineer with Cisco Talos, where he studies practical and effective uses of AI for defensive security operations. He is also a SANS Certified Instructor, where he teaches threat hunting and network forensics. David has nearly 30 years of experience in the information security field, primarily in incident detection and response, threat hunting, and Cyber Threat Intelligence (CTI). He is the creator of the Pyramid of Pain and lead author of the PEAK threat hunting framework. Really, he just wants to make security better for everyone. You can follow David on Bluesky as @DavidJBianco.bsky.social or on Mastodon as @DavidJBianco@infosec.exchange.

Cybersecurity Professional & Creator | Community Builder | Speaker

Eric Darancette is an experienced Security Architect at Check Point Software Technologies, with over 20 years of expertise in Information Technology. He has focused on designing, building, and leading infrastructure and cybersecurity projects across the finance, hospitality, and gaming industries. Eric specializes in identifying and mitigating security risks, protecting critical data, and ensuring the integrity of complex systems. His deep knowledge of both technical and strategic IT aspects has enabled him to deliver secure and resilient solutions while continuously enhancing cybersecurity efforts. Eric's leadership and commitment to risk management make him a crucial asset in safeguarding the digital infrastructure of enterprises.

Jonathan is a Solutions Engineer at Cisco Systems, where he covers the full Cisco portfolio for State, Local, and Education (SLED) customers. He brings a unique perspective to the role, having spent 26 years working in state government before transitioning to the technology industry. That firsthand public sector experience gives him deep insight into the challenges facing government agencies and educational institutions as they modernize their infrastructure and navigate an increasingly complex digital landscape.

Corey Ball is a cybersecurity consulting manager at Moss Adams, where he leads its penetration testing services. He has over ten years of experience working in IT and cybersecurity across several industries, including aerospace, agribusiness, energy, financial tech, government services, and healthcare. In addition to a bachelor’s degree in English and philosophy from Sacramento State University, Corey holds the OSCP, CCISO, CISSP, and several other industry certifications.

Ivan is a security professional specializing in detection engineering and blue team operations. He has previously worked in PCI security + compliance, as a security generalist, and is a veteran of the local 19th Special Forces Group.

A seasoned security leader with significant experience as both a consultant & CISO. Having worked, & lived, all over the world working as a consultant, vCISO, CISO & Advisor I've learned a lot about a little or a little about a lot. A specialist in GTM motions for security focussed products with deep experience in supporting international companies in breaking in to the US market.

Jared Stewart is a Staff Security Engineer at Affirm focused on enterprise security, SaaS security, identity, cloud security, and security automation. He holds a B.S. in Cybersecurity from Brigham Young University and an M.S. in Cybersecurity from New York University.

Dr Katie Paxton-Fear is a lecturer of cyber security at Manchester Metropolitan University, she's a hacker and YouTube, she's made 50+ videos on a range of topics, explaining vulnerabilities, tools etc, and made a splash as an API hacker

Kai is a consultant here at SpecterOps. He loves reverse engineering, learning about Windows internals and the histories behind them...

Shaun currently labors as a Solutions Engineer in the Infosec space. Having labored for the past decade in healthcare Infosec, he's been involved in everything from bootstrapping security programs from the ground up to leading incident response and blue team operations for large multi-national organizations. He earned a bachelors degree in network administration and security from Utah Valley University where he concurrently spent 10 years at Novell / SuSE working as a global escalation engineer performing LAN/WAN analysis for customers around the globe. His focus has now shifted to exploring new security solutions, bridging the gap between security and usability, evangelizing an attitude of continuous improvement, and architecting transformative information security programs.

Lee Anderson has worked in IT since 2005 and cybersecurity since 2009, with experience spanning threat and vulnerability management, adversary emulation, red teaming, and security awareness. He has helped establish internal red teams at large organizations and has spent much of his career focused on the human side of security—particularly social engineering, ethical practice, and behavior change.

Madeline (snacks) is a governance, risk, and compliance professional who brings a hacker's curiosity to the compliance world. Fluent in both red- and blue-teaming, she spends her time testing tools and writing her own code to keep pace with new technologies and threats. Being a GRC practitioner allows her to blend technical skills with legal know-how on a daily basis. She spends the rest of her free time designing courses and presentations to advance GRC and technical communities, in hopes of inspiring others toward careers they too, enjoy.

- Graduated from Arizona State with a B.S. in Computer Science with emphasis in Cybersecurity

Matt is an offensive security professional with 14 years of experience in cybersecurity, including 9+ years focused on offensive security. He began his career on a helpdesk before transitioning into digital forensics, and later built and scaled a penetration testing team from the ground up. He currently serves as a manager at IBM X-Force Red, where he leads hackers, and drives offensive security methodology and automation efforts for the Americas pentest team.

Matt Young is a cyber engineer for the Space Dynamics Laboratory. Before SDL, he worked for three decades as an embedded system developer for Hewlett-Packard, with 10 years of that time as a cybersecurity architect. His passion is building secure systems and when he isn't doing that, he's restoring antique clocks and furniture. He has five children and sadly, none of them are engineers.

I've been sitting in front of a computer since I was three. I've been a professional Software Engineer for 30 years. Having helped write several DBMSes, and having a lot of focus on databases from deep theory to practice, I want to share what I know.

Life long student and learner that arrived in security after a lengthy sting as a Software Engineer.

Nick Roy lives in Boston with his wife and two cats, enjoys solving math problems on college chalkboards at night, and runs a website dedicated to the city's best dive bars. He works at a security startup and maintains a blog focused on OSINT and North Korea

Parish Bushnell is the Manager of Information Security at Medallion Bank, an FDIC regulated consumer lending institution headquartered in Utah. He leads information security governance, vendor risk management, regulatory compliance, third party security oversight, and cybersecurity strategy. Parish recently designed and implemented the bank's AI governance program using the NIST AI Risk Management Framework, leading the effort from initial assessment through board approval and operational deployment. In addition to his industry experience, he has served as an adjunct instructor in the Information Systems Department at the University of Utah David Eccles School of Business for the past decade.

Paul Keener - Professional Bio

Moses has over 10 years of experience working in cyber security. From BYU, Moses earned a Bachelor of Information Technology and a Master of Technology, both with emphasis in Cyber Security. While in college, Moses worked in the Cyber Security Research Lab as the lab manager performing research and leading the student red team to perform penetration tests. Moses worked as the Senior Security Analyst and Team Lead, developing and building out the CES Security Operation Center to provide security services to multiple college institutions. Moses joined Rapid7's pentesting team over five years ago and works daily with clients to provide them meaningful impact and expert advice.

Dr. Shana Osterloh grew up in Los Angeles, where she began singing professionally at the age of eleven in musicals, choirs, and other solo venues. Her love of opera, learning other languages, and travel motivated her to complete a bachelor's master's, and doctorate of musical arts in vocal performance. Shana concurrently taught as a professor of music, specialising in music technology, which eventually led to cyber security. She has engaged in Risk Management, Governance, Risk, and Compliance, and is currently a Site Reliability Engineer for Filevine. Shana has travelled throughout the US and Europe, singing for many different audiences, dignitaries, political figures, and royalty. She speaks both English and Germany fluently. Shana's greatest accomplishments are her family, especially including her 4 children and several step-children.

N/a

Sherrie is a senior leader overseeing Cybersecurity at Clyde Companies. She previously oversaw Security Operations and Engineering at 3M and was the CISO for Swire Coca-Cola. She has a Masters in Information Systems from the University of Utah. She is in the presidency of FBI’s Infragard, a board member of Women in Cybersecurity, and a committee member of Silicon Slope’s security chapter.

Andrew Brandt is a veteran security researcher who currently works for Huntress Labs as an incident commander. His work seeks to determine and communicate the root cause of cybersecurity incidents for the benefit of the cybersecurity industry and the wider public.

Steven McCown is a Chief Architect at Anonyome Labs where he conducts R&D for security and privacy technologies. He serves in leadership positions at the Decentralized Identity Foundation, Trust Over IP, and is a Commissioner on the Utah Privacy Commission. During his career, McCown has invented several patented mobile payment and security technologies. While at the Idaho National Laboratory (INL; U.S. Dept. of Energy), he performed security vulnerability discovery for computers and mobile devices. He also created a method for common cellphones to detect ionizing radiation (from ‘dirty bombs’) and ‘phone home’ to alert first responders.  While serving as a U.S. Air Force officer, he led virtual reality research and built post-mission analysis systems for the AWACS aircraft.  McCown holds B.S. & M.S. degrees in Computer Science from Brigham Young University, holds current Certified Information Security Manager (CISM) and Certified Data Privacy Solutions Engineer (CDPSE) certifications, and is an inventor on 34 patents.

Suraj Siddharudh is a Sr. Principal Security Architect at Palo Alto Networks, where he engineers cyber-resilient solutions designed to defend against sophisticated, active threats. As a lead practitioner of Project Glasswing (Anthropic's Mythos LLM), Suraj leverages advanced AI models to drive shift-left strategies and enforce secure-by-default architectures across a massive product portfolio. He brings critical, frontline experience to his role, having directed the response and remediation for multiple high-stakes security incidents seen by Palo Alto Networks over the last few years. Furthermore, he is the architect of the Product Security Alert (PSA) program, a pioneering initiative that delivers high-fidelity, actionable security communications based on real-time threat and product intelligence. He holds an MS in Computer Science from North Carolina State University.

Dale holds a Ph.D. in Biometrics and Machine Learning and current CISSP and GXPN certifications with over 30 years’ experience in IT and Security. From 2010 – 2019 as a Professor in the BYU IT & Cybersecurity program, he established a student cyber-defense team which has twice ranked in the top three national teams. In 2015, as the Director of the BYU Cybersecurity Research Laboratory, he introduced an annual Girls Cybersecurity Camp which has introduced the field to hundreds of young women. Before BYU, he ran his own company providing security architecture services to a variety of clients from military and aerospace, to finance and healthcare.

Tom Pohl is a Principal Consultant and Penetration Testing Team Manager at LMG Security. Prior to LMG, he has spent most of his career on the blue team building and securing systems used by millions of people. And by night, he is a competitive CTF player and has won several black/gold badges including THOTCON, Circle City Con, Wild West Hackin’ Fest and DEF CON. He is good at what he does because he’s already made many of the mistakes that he encounters in client environments on a daily basis.

Mr. O'Donnal has been involved in offensive security in some way for over 30 years. His current role continually tests his abilities to think on his feet and up his game to beat the latest in endpoint and network detection and response systems and deliver quality adversary simulations to his clients, helping them to identify their blind spots and to improve their detection capabilities. Mr. O'Donnal is currently involved in an additional project to draft an effective AI testing methodology for the Rapid7 penetration testing team which has involved countless hours of digging into the world of AI and LLMs to understand their weaknesses and how to identify them.

Tyler Edwards is a Security Operations Manager at Arctic Wolf, where he leads frontline defenders and works to keep the SOC effective, resilient, and just a little less chaotic. With a background that ranges from Concierge Security Engineer to technical instructor, Tyler blends real‑world cyber operations experience with a passion for developing people—not just processes.

Kaden is a tech head, musician, professional blue teamer, and caffeine addict.