Talks, classes, and podcasts
Everything public since 2011. Slides for most of the recent talks live in monopreso; recordings in the YouTube playlist.
Talks 83
2026
- 10-23Agent Security Private
- 09-08AI Governance and Guardrails Alabama CSASlidesEvent
- 09-03Building Modern AI Agents AAIF WorkshopSlides
- 08-27Coding Agent Loops AI@Work 10Slides
- 08-27Building Modern AI Agents AAIF WorkshopSlides
- 08-20Guardrails for AI Coding SANS@NightSlides
- 06-09Guardrails for AI Generated Code SANS@NightSlides
- 02-19Guardrails for AI coding ISACA DCSlides
- 02-17Live coding prototype and demo session AI Coding 2026
2025
- 10-29How I learned to stop worrying and love vibe coding Three Rivers Information SecuritySlides
- 10-29AI in Cybersecurity Panel Three Rivers Information Security
- 10-07How I learned to stop worrying and love vibe coding: security edition SANS CloudSecNext @ NightSlides
- 10-04Keynote: Best Friends Forever: Cloud and AI SANS CloudSecNextEvent
- 10-03How I learned to stop worrying and love vibe coding: security edition SANS CloudSecNextWatchSlidesEvent
- 09-25AI Tools for Security Professionals SANS Network Security 2025Slides
- 09-19How I learned to stop worrying and love vibe coding: security edition BSides ColumbusSlidesEvent
- 09-18How I learned to stop worrying and love vibe coding: security edition DevOpsDays DCSlidesEvent
- 07-11How I learned to stop worrying and love vibe coding: security edition BSides PittsburghWatchSlidesEvent
- 05-28Vibe coding safety course CSA PittsburghWatchSlidesEvent
- 02-18Container Security ISSA PittsburghSlidesEvent
2024
- 10-28Your Governance Is (Still) Broken Pittsburgh InfoSec Day 2024SlidesEvent
- 09-10Automating Cloud Security Alabama CSASlidesEvent
- 06-27Cloud Native GRC Cloud Native Security ConWatchSlides
- 05-07AI Hackathon AI HackathonEvent
2023
- 12-04Your Governance is Broken 2023 PGH InfoSec DayWatchSlidesEvent
- 11-06Lightning Talk 2023 KubeConEvent
- 10-16Event co-host 2023 CloudSecNextEvent
- 10-13Cloud Security Panel 2023 TRISSEvent
- 09-22Platform Engineering and Security Guardrails 2023 Pittsburgh TechFestSlidesEvent
- 09-07Getting Started with Security Policy as Code Cloud Native Security PghEvent
- 09-05Just In Time Cloud Permissions (updated) SANS Cloud Security London @ Night
- 08-23Cloud Security (Private) Domestic Security Alliance Council
- 07-25IaC Security (updated) OWASP PittsburghEvent
- 06-07Just In Time Cloud Permissions InfraGard Pittsburgh
- 02-23IaC Security at (even larger) Scale SANS Cloud Defender Dallas @ Night
- 01-13Passwords for Humans Carnegie Science CenterWatch
2022
- 12-13OWASP 2021 Private
- 12-07Simplifying IaC Security DevSecConWatch
- 10-25Cloud Native Security Best Practices Cloud Native Security ConWatch
- 10-18Cloud Native Security Best Practices (ISC)2 PittsburghWatch
- 10-14Transparent IaC Security Three Rivers Information Security
- 05-04IaC Security at Scale CloudSecNextWatch
2021
- 07-14Infrastructure as Code (IaC) Security Pittsburgh Hackers Association
- 07-13The Pros and Cons of AWS Security Services Private
2020
- 11-23Secure coding in ASP.NET Private
- 11-03PKI and Cryptography Pittsburgh CISSP Study Group
- 01-30Making Security Faster Doing Better Business Seminar
2019
- 12-09SaaS Business Email Compromise Lessons Learned Pittsburgh InfoSec Day
- 10-08TLS Best Practices for Developers Private
- 04-18Cleaning up your Command Line BSides Flood City
2018
- 12-05Software Development Security Pittsburgh CISSP Study Group
- 04-18The Use and Abuse of Blockchains Steel City InfoSec
- 02-05Steel City InfoSec InfraGard Pittsburgh
2017
- 12Cutting through the buzz: ML & AI Steel City InfoSec
- 10-20Cutting through the buzz: ML & AI Three Rivers Information SecurityWatchSlides
- 09-13Apache Metron BroCon 2017
- 07-19Security Data Analytics for the masses NEOISF
- 03-15Wireless Security University of Pitt InfoSec Group
- 02-07Information Security Starter Kit University of Pitt InfoSec Group
- 01-12Security Data Analytics for the masses Steel City InfoSecWatch
2016
- 08-11Proximity Attacks Steel City InfoSecWatch
- 07-22Becoming the Enemy - Understanding Attackers Community College Cyber Summit
- 06-08Kickstarting Your Cybersecurity Career Pittsburgh Technical Institute
- 05-12Automotive Security Steel City InfoSec
- 04-28A DROWN deep dive (TLS security) Solutions 4 Networks
- 04-07A Survey of Pittsburgh InfoSec Software Engineering Institute
- 02-11Software Defined Radios Steel City InfoSec
2015
- 11-10Password Cracking Robert Morris University
- 11-05Alumni Speaker Series Pittsburgh Technical Institute
- 09-24Password Cracking Steel City InfoSecWatch
- 09-16Cryptography in 2015 (Quantum update) (ISC)2 Pittsburgh
- 08-26DEFCON Briefing Pittsburgh InfraGard
- 07-07The Dos and Don'ts of Wireless Pittsburgh Code & Supply
- 04-09Wireless Keyloggers and KeySweeper Steel City InfoSecWatch
- 01-22Audio Surveillance Steel City InfoSec
2014
- 10-20Mobile Device Security Robert Morris University
- 02-11Alumni Day Presentation Forbes Road CTC
- 01-092013 - What Just Happened? Steel City InfoSec
2013
- 04-08Life After Graduation Pittsburgh Technical Institute
- 03-25Vulnerability Management 101 Pittsburgh Technical Institute
- 01-03Wireless Security Steel City InfoSec
2012
- 08-07Life After Graduation Pittsburgh Technical Institute
2011
- 10-05Alumni Speaker Series Pittsburgh Technical Institute
Classes taught 61
2026
- 12-08AI-Native Software Development Private Class
- 11-02SEC545 SANS Raleigh 2026
- 10-26SEC545 SANS Miami 2026
- 10-19AI-Native Software Development Private Class
- 10-07AI-Native Software Development Private Class
- 09-14SEC545 Private
- 08-19SEC545 SANS Cloud Security Exchange Summit 2026
- 06-08SEC545 SANS Chicago 2026
- 04-20SEC545 SANS Amsterdam April 2026
- 04-07AI-Native Software Development Private
- 02-02SEC545 SANS DC Metro Rockville
2025
- 12-12SEC545 SANS Cyber Defense Initiative 2025 x2
- 11-17SEC545 Private
- 10-02SEC540 SANS CloudSecNext, Denver
- 09-22SEC540 SANS Network Security, Vegas
- 08-25SEC540 SANS Emerging Threats, VA Beach
- 07-28SEC545 SANS Live Online
- 06-02SEC540 SANS Baltimore Spring 2025
- 04-13SEC540 SANS 2025 (Orlando)
- 03-17SEC540 SANS OnDemand Recording
- 03-03SEC540 SANS Security East Baltimore 2025
2024
- 12-04SEC540 SANS Seattle 2024
- 10-07SEC540 Private
- 09-04SEC540 SANS Network Security Las Vegas
- 07SEC540 Private
- 05-09SEC540 SANS Security West San Diego 2024
- 05Container Security 101 and 201 Private
- 04SEC540 Private
- 03-24SEC540 SANS Orlando 2024
- 02-19SEC540 SANS Security East 2024 (Nola)
2023
- 11-27Container Security 101 (Event link) Pittsburgh Code & Supply
- 11-01Mastering Policy as Code SANS Workshop
- 10-18SEC540 SANS Dallas Cloud Sec Next 2023
- 10-16Container Security 101 SANS Workshop
- 09-25SEC540 SANS Managing Security Risk 2023
- 09-04SEC540 SANS Cloud Security London 2023
- 08SEC540 Private
- 07-10SEC540 SANS SANSFIRE 2023
- 05-21SEC540 SANS Cyber Security East
- 04-27Container Security 101 SANS Workshop
- 03-06SEC540 SANS Las Vegas Winter 2023
- 02-20SEC540 SANS Cloud Defender Dallas 2023
2022
- 11-07SEC540 SANS Cyber Security East
- 09-26SEC540 SANS Baltimore Fall 2022
- 07-10SEC540 SANS London 2022
- 06-13SEC540 SANS Cloud Defender Summer 2022
- 04-10SEC540 SANS 2022
- 02-28SEC540 SANS Cyber Security Central
2019
- 06-27Blue Team CTF BSides Pittsburgh
2018
- 05-10Smart Contract Security (Collab with Justin Leapline) Steel City InfoSec
- 02-08Attacking Block Cipher Cryptography Steel City InfoSec
2017
- 02-09Security Data Analysis Steel City InfoSec
2016
- 08-11Proximity Attacks Lab Steel City InfoSec
- 05-12Automotive Security Lab (Collab with Dan Klinedinst) Steel City InfoSec
- 02-11SDR Security (Collab with David) Steel City InfoSec
2015
- 09-24Password Cracking Lab Steel City InfoSec
- 07-07Wifi Security Pittsburgh Code & Supply
- 01-22Audio Surveillance Steel City InfoSec
- 04-09Attacker drop boxes (Collab with Brian Gray) Steel City InfoSec
- 01-22Eavesdropping at a distance (Collab with Brian Gray) Steel City InfoSec
2013
- 03-07Wifi Security Steel City InfoSec
Podcasts and live streams 24
2026
- 08-03Behind the Numbers (with Matthew Coombs) Behind the NumbersWatch
- 07-19Your Developers' AI Code Looks Perfect — Until It Hits Production (with Fin Barker) The Sunny SideWatch
- 06-27How to Build Self-Improving Coding Agents (private) GRC Engineering Club
- 06-13The Forward Deployed Engineer, Agentic Voting, & Treating GRC Like a Product Anti-Checkbox PodcastWatch
- 06-01AI Chats w/ Zenable and OpenArc Seiso Side-up PodcastListen
- 05-19AI-Driven DevSecOps: Agentic Code Review in GitLab & GitHub SANS Cloud SecurityWatchSlides
- 05-18Build in Public Episode 18 Zeolla (with Troy Mann) Ascend Integration PartnersWatch
- 05-18Modernizing Managed Security Podcast - Episode 7 (with Ryan Smith) Modernizing Managed SecurityWatch
- 04-13Jon Zeolla of Zenable The Automated AdvantageWatch
- 04-07From Cybersecurity to AI-Driven Code Quality Future Proof IT PodcastWatch
- 03-25AI-Driven DevSecOps: Securing Coding Agents with MCP SANS Cloud SecurityWatchSlides
2025
- 07-11BSides PGH 2025 Post-Talk Interview Distilled Security PodcastWatch
- 07-08AI Risks, Threat Modeling, and The Future of Vibe Coding Distilled Security PodcastWatch
- 06-10Scaling Compliance: GRC Engineering and Policy as Code SANS Cloud SecurityWatch
- 05-20Policy as Code and Automated Governance SANS Cloud SecurityWatch
- 03-24AI Advancement and Security Concerns Seiso Side-up PodcastListen
2024
- 08-30Easy_Infra Seiso Side-up PodcastListen
- 05-23Seiso's Origins Seiso Side-up PodcastListen
2023
- 09-13Cloud-native security Wednesday Offensive
- 05-30Season 2 Episode 20 - IAM Roles, Crypto Mining and Hats LogicastListen
2021
- 11-06Security Governance and Compliance in Serverless Applications Cloud Security PodcastListen
2020
- 07-26Episode II - Jon Zeolla Reddup SecurityListen
2018
- 02-28Datanauts 123: Security without Firewalls Packet PushersListen
2016
- 06-01Datanauts 036: Busting The Security Silo In The Data Center Packet PushersListen