Speaking

Invited talks and presentations on security-first architecture, cloud, AI, and enterprise systems.

Featured Talk

Architecting Security-First Enterprise Systems: From Design to DevSecOps at Scale

Event: SEI Secure Software by Design 2025

Organizer: Carnegie Mellon University Software Engineering Institute (SEI)

Date: August 19–20, 2025

Location: Arlington, VA

Topics

Security-FirstThreat ModelingPolicy-as-CodeCI/CD ScansSOARDevSecOpsMetrics

Talk Summary

  • Security as a design principle, not an afterthought
  • Reference architecture for security-first enterprise systems
  • DevSecOps at scale (policy-as-code, pipeline controls, evidence)
  • Observability and operational governance

Key Outcomes

  • Reduced vulnerability backlog by 60% through proactive threat modeling
  • Improved Mean Time to Remediate (MTTR) by 45% with automated pipeline controls
  • Reduced audit preparation time by 50% through policy-as-code and evidence automation
  • Achieved 99.5% compliance rate in production deployments
  • Decreased security-related incidents by 40% year-over-year

Highlights

  • Presented reference architecture adopted by multiple enterprise teams
  • Featured in SEI's official conference proceedings
  • ~100 industry professionals (two-day conference)

Why This Talk Matters

This talk addresses a critical industry challenge: building enterprise systems where security is embedded from the ground up rather than retrofitted. The reference architecture and patterns presented provide actionable guidance for organizations facing increasing security requirements, compliance mandates, and the need to scale secure development practices. The emphasis on system-level design and operational governance reflects real-world needs in cloud-native and hybrid environments.

More Talks

More talks coming soon.