Blue Team Con 2026

Learning something new, for me, often means figuring it out myself. While we have tutorials and AI on demand, experimentation and a willingness to get things wrong is still required. My story started with a book called “How to Do Just About Anything” and a realization that, with enough curiosity, you actually can.


This talk shares a non-linear path from breaking computers as a teen to understand them, creating within extreme constraints, and turning trial and error into a career that spans from high school dropout to security leadership, all while staying true to my art-tech-geek roots.


Rather than focusing on specialization, I’ll break down the practical patterns behind building strong fundamentals, both technical and human, combined with curiosity, creativity, and ownership can open doors and get you into conversations you weren’t “qualified” to be in.


I’ll connect these ideas directly to real-world security work: learning new domains quickly, navigating organizational complexity, and building the relationships needed to drive change. We’ll explore how incremental improvement compounds over time, how to operate in environments where “this is how it’s always been done” is the default, and how community involvement accelerates growth.


If you’ve ever felt like your path doesn’t fit a traditional mold, or you just know you can do more, this talk offers a practical perspective on how building beyond your core strengths can help you create opportunities, influence outcomes, and define your own path in security.

The presentation “Strength in Diversity: Building an Inclusive Cybersecurity Workforce” explores how diversity across race, gender, sexual orientation, and neurodiversity strengthens cybersecurity by fostering innovation, resilience, and more adaptive defenses. It argues that cybersecurity is as much about people and perspectives as it is about technology, and that inclusion drives strategic advantage in addressing complex, evolving cyber threats.
The introduction sets the tone by positioning diversity not just as a social ideal but as a core element of operational effectiveness. It emphasizes that a broad range of lived experiences improves problem-solving and enhances anticipation of attacker behavior. A personal story titled “A Gay Man’s Journey Through Change and Resilience” illustrates this principle through a cybersecurity professional who endured discrimination and living through the AIDS crisis, eventually turning adversity into empowerment, mentorship, and advocacy for diversity in tech.
Data presented from 2023 industry studies—including (ISC)², CyberSeek, and ISACA—reveals progress and persistent gaps. Women comprise about 26% of the U.S. cybersecurity workforce, while approximately 62% of professionals identify as White. Black, Hispanic/Latino, and Asian professionals represent roughly 9–10%, 8%, and 17–18% respectively. Around 7–8% of cybersecurity professionals identify as LGBTQ+, and 5–10% are estimated to be neurodivergent. Leadership, however, remains disproportionately White and male.
Subsequent sections examine how specific forms of diversity enhance cybersecurity effectiveness. Racial diversity introduces broader cultural understanding and region-specific threat identification. LGBTQ+ inclusion fosters authenticity, psychological safety, and creativity—core elements of innovative problem-solving. Gender diversity improves usability, ethical awareness, and understanding of human vulnerabilities in security systems. Neurodiversity, though only briefly mentioned, provides unique cognitive strengths like pattern recognition and sustained focus, valuable in security analysis.
The presentation warns against “groupthink,” which arises in homogeneous teams and can blind organizations to unseen threats. Diverse teams, by contrast, challenge assumptions and expand awareness. The business case follows: data show that organizations with diverse teams outperform peers in innovation, responsiveness, and decision-making. In cybersecurity—where agility is essential—diverse perspectives directly translate into better incident response and threat intelligence.
Practical guidance focuses on dismantling systemic barriers such as implicit bias, inequitable advancement, and limited mentorship. Recommendations include inclusive hiring, employee resource groups (ERGs), leadership training on unconscious bias, and structured mentorship for underrepresented professionals. Building an inclusive culture requires active allyship, where leaders champion belonging and empower all employees to participate fully.
Looking toward the future, the presentation notes that global cyber threats demand culturally intelligent solutions and that younger, more diverse generations will reshape the field. The call to action urges professionals to recruit widely, support consistently, and lead inclusively. The final message encapsulates the presentation’s core thesis: diversity of people produces diversity of thought—creating stronger, more resilient cybersecurity defenses for all.