Robert Hurlbut is a Principal Application Security Architect and Threat Modeling Lead, Aquia. Robert is co-author of the Threat Modeling Manifesto, Threat Modeling Capabilities Model, and co-host of the Application Security Podcast.

Brook is the Author of Secrets Of A Cyber Security Architect (Auerbach, 2019) and Securing Systems: Applied Security Architecture and Threat Models (CRC Press, 2015), co-author of Building In Security At Agile Speed (Auerbach, 2021) and contributing author to Core Software Security (CRC Press, 2014). Brook is a passionate security architect with decades of technical leadership experience. He currently provides security architecture leadership for three security consultancies, as well as being an advisor to True Positives, LLC and Resilient Software Security, LLC. providing both technical leadership and strategy to the consultancies as well as contributing to our clients’ holistic software security programmes and secure design/threat modeling efforts.

Caroline Wong is the Chief Strategy Officer at Cobalt. She has 15+ years of cybersecurity leadership, including practitioner, product, and consulting roles. Caroline authored the popular textbook, Security Metrics: A Beginner's Guide. She teachers cybersecurity courses on LinkedIn Learning and hosts the Humans of InfoSec podcast.

Matt is an experienced security architect and security program leader. He has deep expertise across the product lifecycle enabling security, privacy, and safety of complex systems with practices such as threat modeling and architecture analysis, code analysis, security testing, secure supply chain and manufacturing, and vulnerability and incident response.

Audrey Long is a Senior Security Software Engineer at Microsoft, holding a Master of Science degree in Cybersecurity from John Hopkins University. Her expertise includes creating coding solutions, performing threat modeling activities, and creating secure architecture.

Izar is a Sr Pr Sec Architect at SXM. He held security-related positions at DDOG, SQSP, and many others. Author and presenter,co-author of "Threat Modeling: A Practical Guide for Development Teams" by O'Reilly, member of the Threat Modeling Manifesto Group, and maintainer of the OWASP pytm tool.

Zoe Braiterman is an information security consultant and researcher. She is passionate about open source. Her contributions include involvement with OWASP and co-authoring the Threat Modeling Manifesto.

Brenna Leath is a Software Security Principal based in Raleigh, NC. As a former Head of Product Security and practitioner, Brenna has implemented scalable solutions for enterprise challenges including security champions, vulnerability management, software supply chain security, and threat modeling.

"Jamil Ahmed holds a PhD in Computer Science from Western University, London, ON in 2014 with years of experience in Threat Modeling. Most recently, he works as a Senior Application Security Engineer at Fortis Games. He also holds CSSLP from ISC2. "

Léandre Forget-Besnard is a security engineer and team lead specializing in offensive security ( pentesting and red teaming). Over the past six years, Léandre has integrated threat modeling into offensive practices, enhancing security assessments.

Laurent Bouchard is an Offensive Security Threat Modeler at Desjardins. He likes to explore how and why systems works the way they do and has been spending the last few years doing so with computer systems.

A top-performing technical leader with extensive experience in delivering threat modeling both as a consultant and in-house. Formerly the Threat Modeling Practice Lead at NCC Group, responsible for technical delivery, service line expansion, training, and business development.

Sarah-Jane has over 25 years of experience in the technology industry, with a strong background in technical operations and software engineering. She is a passionate advocate for a practical approach to security that aligns with business objectives.

Jason Nelson works in the Financial Industry currently and has over 20 years of security industry experiences. He has worked in multiple countries and across several industries. He has built teams for threat modeling programs that have taken the journey from new to highly mature and globally scaled.

Ron is a doctoral student with Tufts Security & Privacy Lab, where he focuses on threat modeling and vulnerability management for medical systems.

Principal Product Security Engineer and Security Architect with more than 20+ years of experience, OWASP Conference Speaker and security podcast participant covering topics of Threat Modeling and Security Design Patterns. Currently working at Splunk securing the Company's Products and Services.

Larry England is a Distinguished Software Engineer having experience in a wide range of technical areas including large-scale systems (z/OS), language runtimes, application development tools, database management systems, text search and retrieval, security, and operating systems.

John Krautheim has over 30 years experience in cyber security and engineering. He has a PhD in Computer Engineering and has taught cyber security at Augusta University and Naval Postgraduate School. John currently leads threat modeling and penetration testing at Broadcom Mainframe Software.

Kim Wuyts is a leading privacy engineering expert with over 15 years of experience in security and privacy. Before joining PwC as Manager Cyber & Privacy, Kim was a senior researcher at KU Leuven where she led the development and extension of LINDDUN, a popular privacy threat modeling framework. Her mission is to raise privacy awareness and get organizations to embrace privacy engineering best practices.

Irene Michlin is an application security lead at Neo4j. Before going into application security, Irene worked as a software engineer, architect, and technical lead at companies ranging from startups to corporate giants. Her professional interests include securing development life-cycles and architectures. After years of AppSec consultancy, she is back to an in-house role, where she can apply all that she’s learned.

Jonathan is from Montreal, Canada and is passionate about Application Security. He enjoys architecture analysis, code review, threat modeling and debunking security tools. Jonathan holds a bachelor's degree in Software Engineering and has 20 years of experience in IT and Security.

Growing up in a military family, thinking about threats and security has always been a part of Roos Hubrechtsen’s life. This led her to pursue a career as a cyber security architect where she has had the privilege to work on many projects ranging from hacking cars to rebuilding hacked companies.

14 years in the tech industry working in security and engineering roles with a decade of experience as a threat modeling practitioner. Currently leading the Product Security function at Snyk, a cybersecurity company that builds developer-first security products.

Currently a Staff Application Security engineer at IronClad with the role of building a new AppSec Program. Before that, Mohamed was also an AppSec Engineer at Amazon for ~ 4 years where he collaborated on 500+ AWS services/features/tools.

Isabel Barberá is the author of PLOT4ai. She is also one of the members of ENISA Working Group on Data Protection Engineering and a National Expert at ISO/CEN/CENELEC working on the development of standards related to AI and privacy engineering.

James Rabe is the Global Technical Program Manager at IriusRisk. He has been working in cybersecurity and compliance realm for nearly a decade and brings a wealth of experience in quantitative analysis and security integrations to solving business problems.

With a strong interest in cyber security matters, ranging from high-level architectural challenges to technical implementations, Michael Boeynaems is the founder of Splynter where he has the opporutnity to prepare organizations end-to-end for future threats that are approaching quickly.

Frank Simorjay is a Principal Program Manager for the Industry Cloud Solutions team at Microsoft. He is a cloud security architect and content developer with an extensive library of security content for Microsoft. He is a CISSP and ISSA Distinguished Fellow.

Dr. Michael Loadenthal is a Professor of Research at the Center for Cyber Strategy & Policy, at the University of Cincinnati. He serves as a SME focused on security, technology, and extremism, advising social movements, journalists, and high-risk individuals to protect themselves off and online.

Adam is the author of Threat Modeling: Designing for Security, and Threats: What Every Engineer Should Learn from Star Wars, and the first recipient of the Adam Shostack Award for Threat Modeling.

Sebastien Deleersnyder, CTO and co-founder of Toreon, has a deep cybersecurity background. He has trained many developers in secure coding practices, founded the Belgian OWASP chapter, and contributed significantly to OWASP projects like SAMM. Now, he’s focusing on integrating application security into DevOps and expanding the reach of threat modeling.