// Speakers

** KEYNOTE **

name: Jayson E. Street
talk: KEYNOTE

A “notorious hacker” by FOX25 Boston, “World Class Hacker” by National Geographic Breakthrough Series, a “paunchy hacker” by Rolling Stone Magazine and, as a “Change Agent” by the Director of Counter Intelligence at the Pentagon!
He however prefers if people just refer to him simply as a Hacker, Helper & Human. (more)

Speaker: Main Track

name: Matthew Poto + Chris Ryan

talk: Azure-Bashing: Weaponizing Free Cloud Shells for Fun, Profit, and Persistence

Matt has dedicated his life to the art of security research. The wire talks. Most people don’t listen. He does, one packet at a time, usually at an hour no reasonable person is awake.

Chris: A series of oddly configured server banners, a JARM fingerprint, curious fields in a security certificate – these aren’t just technical details, but are instead threads in a narrative tapestry woven like a John le Carre novel. For over 20 years, Chris has dedicated his life to studying these threads and the intersection between cybersecurity, Russian linguistics, and free and open source software. His career path has taken detours through academia, aerospace and defense, software development, and cybersecurity.

Speaker: Main Track

name: Brian Lowe + Mark Dube
talk: Yet Another AI Talk — The Good, The Bad, The Ugly: AI for Pentesters

Brian Lowe is the Team Lead for Penetration Testing at KirkpatrickPrice, where he conducts external, internal, web application, cloud, and red team assessments for organizations across regulated industries. Before moving into offensive security, he served 23 years in the United States Air Force, retiring as a Senior Master Sergeant (E-8). His military career included deployments to Iraq, Afghanistan, the UAE, Kuwait, Saudi Arabia, and Turkey, with collaborative work alongside the FBI, U.S. Secret Service, State Department, and Department of Energy. He holds industry certifications including CRTO, GWAPT, PNPT, eCPPTv2, GCIH, and CEH, and has been credited with CVE-2025-55817, CVE-2021-40492, and CVE-2021-40353. Outside of work, Brian is a Brazilian Jiu-Jitsu black belt under Gustavo Machado, a father of six, and a PopPop of four. His kids think hacking is cool — which, honestly, is reason enough.

Mark Dube is a penetration tester at Kirkpatrickprice specializing in adversary simulation, security automation, and AI security testing. His work helps organizations understand how attackers could gain access, move through their environments, and evade defensive controls. He develops practical tools and workflows that improve efficiency and depth of offensive security assessments. Mark holds multiple offensive security certifications and earned a B.B.A. in Information Systems from the University of Texas at San Antonio.

Speaker: Main Track

name: Matt Moen

talk: Encrypting Your Infrastructure Without Getting Fired

BIO: Matt has been involved with all things Security, Open Source and Linux since before they were cool. He’s worked with everything from Fortune 100’s and Wall Street Fintech firms to a tropical fish wholesaler. When not working tech, hiking or bicycling, he enjoys geeking out with symphonies, prog rock, jazz, bluegrass and whatever else tickles his melodic, harmonic and rhythmic fancy, because it don’t mean a thing if it ain’t got that certain je ne sais quoi. Matt holds CISSP & CISA certifications and is currently serving as the President of the Capitol of Texas chapter of the Information Systems Security Association in Austin.

Speaker: Main Track

name: Evan Borysko

talk: Root by Default

BIO: Evan Borysko is a fractional CISO with Greenbelt Advisors in Austin, advising startups and enterprise clients on security program development, Product Security, Secure SDLC, and Zero Trust architecture. He holds the CISSP, CISM, AAISM, CCSP, CSSLP, and CMMC Registered Practitioner credentials, serves in ISC2 Austin Chapter leadership, and contributes to the OWASP Secure Pipelines Verification Standard (SPVS) project. His recent work translates supply chain threat intelligence into maturity-tiered security guidance for developer audiences. He is also a former circus performer and remains comfortable working without a net.

Speaker: Main Track

name: Jacob Wellnitz

talk: From IOCs to Answers

Bio: Jacob Wellnitz is a Senior Security Consultant at Beazley Security, specializing in Digital Forensics and Incident Response (DFIR). He has nearly two decades of experience in technology and cybersecurity and has worked on hundreds of incident response investigations involving ransomware, business email compromise, identity compromise, data theft, enterprise intrusions, and advanced threat actors. Jacob’s background across incident response, critical infrastructure, higher education, telecommunications, enterprise infrastructure, and cloud environments gives him a practical perspective on both forensic investigation and the operational realities of recovering from a cyberattack.

Speaker: Briefings

Name: Julian Shalaby + Markus De Shon

Tech/Training: Linux system monitoring with bpftrace and eBPF

BIO: Julian is a Cofounder at Perj Security.
Markus has led Detection teams for more than 25 years at CERT/CC, Google, Netflix, and Databricks. He is known for his blending of hands-on Detection work and empathetic leadership of high-performing teams. He recently co-founded Perj Security in San Francisco to fix File Integrity Monitoring and detect attacker persistence.

Speaker: Briefings

name: Paul Christiansen

Tech/Training: Git for Dummies

BIO: Paul is a cybersecurity student at UTSA, finishing a BBA in Cybersecurity Management and an AAS in Cyber Defense. His technical work focuses on Linux and eBPF-based detection, including a rootkit detection proof of concept and a Falco IDS deployment built as defensive lead for NCAE Cyber Games. He joins Lumen Technologies as an Information Security Engineer after graduation.

Speaker: Briefings

name: Whitney Zilton

tech/training: compile-sast: When Your Vulnerabilities Fail to Compile

BIO: Whitney Zilton is a backend software engineer with over 5 years of experience, currently pivoting into application security. She organizes the Sugar Land chapter of Cybersecurity Circle and serves as Engagement Coordinator for WiCyS Houston. Her work focuses on integrating security earlier in the software development lifecycle, with a particular interest in compiler-level tooling and threat modeling automation.

Speaker: Briefings

name: Sajida Shabanali

tech/training: All Aboard the Cybersecurity Employment Express – From Education to Employment.

BIO: Sajida Shabanali is a Cybersecurity Instructor and Employer Engagement Coordinator at the Center of Cybersecurity and AI at the University of West Florida in Pensacola, Florida. A proud three-time alumna of the University of West Florida, Sajida earned her Bachelor’s degree, along with both her Master’s degrees in Software Engineering and Cybersecurity, all from UWF. Known as a “people person,” Sajida is deeply committed to guiding students in achieving their career aspirations and advancing their professional journeys. With a strong background in Information Technology, she is acutely aware of the competitive landscape of the Cybersecurity job market. She passionately advocates for enhancing skill sets through industry certifications available at the Center. Her mission is clear: to connect students with their dream jobs. She is convinced that hard work, education, and strategic networking can pave the way to success, regardless of the obstacles that may be encountered.

Speaker: Panel

name: Red Team and Pen Testers

Panel Discussion: War stories, Q&A and discussion with industry professionals, insiders and practitioners.

panelist: Phillip Wylie

panelist: Jason Haddix

panelist: ATTR1T10N

panelist: Ch0mp4

panelist: wetw0rk