Loading…

Subject: Career Matters clear filter
Saturday, September 12
 

10:30am CDT

How to Do Just About Anything (Including Security): Turning Curiosity and Creativity into a Career
Saturday September 12, 2026 10:30am - 11:30am CDT
Learning something new, for me, often means figuring it out myself. While we have tutorials and AI on demand, experimentation and a willingness to get things wrong is still required. My story started with a book called “How to Do Just About Anything” and a realization that, with enough curiosity, you actually can.


This talk shares a non-linear path from breaking computers as a teen to understand them, creating within extreme constraints, and turning trial and error into a career that spans from high school dropout to security leadership, all while staying true to my art-tech-geek roots.


Rather than focusing on specialization, I’ll break down the practical patterns behind building strong fundamentals, both technical and human, combined with curiosity, creativity, and ownership can open doors and get you into conversations you weren’t “qualified” to be in.


I’ll connect these ideas directly to real-world security work: learning new domains quickly, navigating organizational complexity, and building the relationships needed to drive change. We’ll explore how incremental improvement compounds over time, how to operate in environments where “this is how it’s always been done” is the default, and how community involvement accelerates growth.


If you’ve ever felt like your path doesn’t fit a traditional mold, or you just know you can do more, this talk offers a practical perspective on how building beyond your core strengths can help you create opportunities, influence outcomes, and define your own path in security.
Speakers
avatar for Dan Browder

Dan Browder

Director, Information Security Portfolio, First National Bank of Omaha (FNBO)
Dan has over 25 years of experience working at the in technology and security spanning roles of graphic design, help desk and security risk. He leads strategic cybersecurity initiatives that shape FNBO’s security posture, with a focus on strategy, risk reporting, AI governance... Read More →
Saturday September 12, 2026 10:30am - 11:30am CDT
Swissôtel Chicago 323 E Wacker Dr, Chicago, IL 60601, USA

10:30am CDT

Security vs Product: A Professional Identity Crisis
Saturday September 12, 2026 10:30am - 11:30am CDT
For years, my instinct was to fix things. See an alert, chase the threat. Find a gap, build a detection. Witness an incident, contain and remediate. After a career built on DFIR, detection engineering, incident response, and sysadmin work, I was trained to be a solution machine, and I was good at it.


Then I became a Product Manager.
Everything broke.


Suddenly the job wasn't to solve the problem in front of me, it was to figure out whether I even had the right problem. The skills that made me dangerous in a SOC were quietly working against me in a product role. I was writing requirements that looked suspiciously like runbooks. I was treating user research like a post-incident review, assuming I knew the problems because I've been there before. Jumping straight to the five whys without sitting in the discomfort of not knowing yet.


This talk is the honest story of my first year as a Product Manager and what a decade in security taught me. Both the gifts and the baggage.
The gifts were real: I understood the users deeply because I was the user. I could cut through technical ambiguity, earn credibility with engineering teams fast, and spot when a "product problem" was actually an architecture problem in disguise. Threat modeling translated almost directly into risk prioritization frameworks. Log analysis taught me how to find signal in noisy customer feedback.


But the baggage was heavy too. Security work rewards decisive, fast, technical action. Product work rewards patience, ambiguity tolerance, and ruthless problem definition. The pivot from solution-first thinking to problem-first thinking didn't happen naturally, it had to be unlearned, deliberately and sometimes painfully.


In this session, I'll walk through the mental model shift that changed how I approach product decisions, the specific security habits that carried over (and why), the ones I had to consciously kill, and how I'm still learning to bridge both worlds. Whether you're a security professional curious about PM roles, a PM trying to work with security-minded engineers, or someone navigating a major career pivot, this talk is for you.
Speakers
avatar for Amanda Berlin, Infosystir

Amanda Berlin, Infosystir

Sr. Product Manager, Cybersecurity, Blumira
Amanda Berlin is the Sr. Product Manager of Cybersecurity at Blumira, where she leads product initiatives focused on XDR and response capabilities as well as incident detection engineering initiatives.
An accomplished author, speaker, and podcaster, Amanda is known for her ability to communicate complex technical concepts in a way that is accessible and engaging for audiences of all backgrounds. She co-authored an O’Reilly Media book Defensive Security Handbook: Best Practices... Read More →
Saturday September 12, 2026 10:30am - 11:30am CDT
Swissôtel Chicago 323 E Wacker Dr, Chicago, IL 60601, USA
  Talk

10:30am CDT

Strength in Diversity: Building an Inclusive Cybersecurity Workforce
Saturday September 12, 2026 10:30am - 11:30am CDT
The presentation “Strength in Diversity: Building an Inclusive Cybersecurity Workforce” explores how diversity across race, gender, sexual orientation, and neurodiversity strengthens cybersecurity by fostering innovation, resilience, and more adaptive defenses. It argues that cybersecurity is as much about people and perspectives as it is about technology, and that inclusion drives strategic advantage in addressing complex, evolving cyber threats.
The introduction sets the tone by positioning diversity not just as a social ideal but as a core element of operational effectiveness. It emphasizes that a broad range of lived experiences improves problem-solving and enhances anticipation of attacker behavior. A personal story titled “A Gay Man’s Journey Through Change and Resilience” illustrates this principle through a cybersecurity professional who endured discrimination and living through the AIDS crisis, eventually turning adversity into empowerment, mentorship, and advocacy for diversity in tech.
Data presented from 2023 industry studies—including (ISC)², CyberSeek, and ISACA—reveals progress and persistent gaps. Women comprise about 26% of the U.S. cybersecurity workforce, while approximately 62% of professionals identify as White. Black, Hispanic/Latino, and Asian professionals represent roughly 9–10%, 8%, and 17–18% respectively. Around 7–8% of cybersecurity professionals identify as LGBTQ+, and 5–10% are estimated to be neurodivergent. Leadership, however, remains disproportionately White and male.
Subsequent sections examine how specific forms of diversity enhance cybersecurity effectiveness. Racial diversity introduces broader cultural understanding and region-specific threat identification. LGBTQ+ inclusion fosters authenticity, psychological safety, and creativity—core elements of innovative problem-solving. Gender diversity improves usability, ethical awareness, and understanding of human vulnerabilities in security systems. Neurodiversity, though only briefly mentioned, provides unique cognitive strengths like pattern recognition and sustained focus, valuable in security analysis.
The presentation warns against “groupthink,” which arises in homogeneous teams and can blind organizations to unseen threats. Diverse teams, by contrast, challenge assumptions and expand awareness. The business case follows: data show that organizations with diverse teams outperform peers in innovation, responsiveness, and decision-making. In cybersecurity—where agility is essential—diverse perspectives directly translate into better incident response and threat intelligence.
Practical guidance focuses on dismantling systemic barriers such as implicit bias, inequitable advancement, and limited mentorship. Recommendations include inclusive hiring, employee resource groups (ERGs), leadership training on unconscious bias, and structured mentorship for underrepresented professionals. Building an inclusive culture requires active allyship, where leaders champion belonging and empower all employees to participate fully.
Looking toward the future, the presentation notes that global cyber threats demand culturally intelligent solutions and that younger, more diverse generations will reshape the field. The call to action urges professionals to recruit widely, support consistently, and lead inclusively. The final message encapsulates the presentation’s core thesis: diversity of people produces diversity of thought—creating stronger, more resilient cybersecurity defenses for all.
Speakers
avatar for Rick Hudson

Rick Hudson

CTO, Critical Path Security
Rick Hudson is currently the CTO (Chief Technology Officer) for Critical Path Security. Rick is a member of the InfraGard (InfraGard is a partnership between the Federal Bureau of Investigation (FBI) and members of the private sector for the protection of U.S. Critical Infrastructure... Read More →
Saturday September 12, 2026 10:30am - 11:30am CDT
Swissôtel Chicago 323 E Wacker Dr, Chicago, IL 60601, USA
  Talk
 
Blue Team Con 2026
From $0.00
Share Modal

Share this link via

Or copy link

Filter sessions
Apply filters to sessions.