2027 Program Committee

Abdulrahman Altuwijry is the Head of Cyber Threat Intelligence at stc (Saudi Telecom Company), with a Master’s degree in Cybersecurity from King Fahd University of Petroleum and Minerals (KFUPM). A cybersecurity leader with broad experience across Threat Intelligence, Digital Forensics & Incident Response (DFIR), SOC, and red teaming. Experienced in operating and leading cybersecurity functions within large-scale, complex environments, with a strong foundation in hands-on technical security operations and incident response.

Alexander Jäger is a Senior Security Engineer working in the Incident Management and Digital Forensics team at Google. He is active in various open source projects. He studied technical computer science at the University of applied sciences in Mannheim and holds a Dipl.-Ing (FH). Alexander is the former Chair of the board of directors and CFO of FIRST (Forum for Incident Response and Security Teams). If not in front of a computer you might find him doing a swim bike run.

Andreas is a seasoned Cyber Threat Intelligence (CTI) analyst and Threat Hunter (TH) with over 15 years in cybersecurity. He currently specialises in the analysis of adversary tradecraft, providing actionable intelligence for strategic and tactical use, and leading and supporting threat hunting programs, and various intelligence initiatives for mission success.

Throughout his career, Andreas has led multiple teams in threat intelligence, threat hunting and detection engineering. He strongly advocates for intel-driven defense to tackle complex cyber threats and collaborates with fellow CTI researchers for investigation, profiling and tracking. He is dedicated to advancing detection- and hunting capabilities by deeply understanding adversary tactics and techniques, as well as refining methods for operationalizing intelligence.

Andreas Sfakianakis is a Technical Director within Unit 42’s Threat Intelligence Advisory Service at Palo Alto Networks, with over 15 years of experience in cybersecurity. He helps organizations understand their threat landscape and strengthen their Cyber Threat Intelligence (CTI) capabilities. Andreas has been an active contributor to the CTI community since 2012 through public research, presentations, blogging, newsletters, and training. Currently, he is a SANS co-author for SANS FOR478 (CTI Foundations) and a certified instructor for SANS FOR578 (Cyber Threat Intelligence course). You can find him on X at @asfakian and online at threatintel.eu.

Angela Wu is the Director of Threat Intelligence and Response in Infocomm Media Development Authority, Singapore. She has over 20 years of information security & technology experience from banks, technology companies and government agency located in Singapore. Her experience is in evaluating security risks, preparing advisories and communicating to Executive Committee about current threats and assessments, recommending mitigations, solutions to detect & prevent attacks. She graduated with a Bachelor of Information Systems from Swinburne University of Technology (Australia) in 2005, and Master of Science (Knowledge Management) from Nanyang Technological University (Singapore) in 2009.

My name is Ashenafi Negash, and I serve as the Head of the Cyber Threat Intelligence (CTI) Division at the Information Network Security Administration (INSA), Ethiopia. I have 13 years of professional experience and a background in software engineering. My work focuses on cyber threat intelligence, analysis of emerging cyber threats, supporting incident response, and strengthening national and international cybersecurity collaboration. I am committed to enhancing cyber resilience through proactive threat analysis and intelligence-driven security operations.

Clemens Sauerwein is an Assistant Professor of Security Engineering at the University of Innsbruck, Austria. His research focuses on engineering actionable cyber threat intelligence (CTI), with particular emphasis on intelligence quality, organisational relevance, and its use in security decisions. He develops methods, frameworks, and prototypes for transforming heterogeneous threat data into intelligence that supports security practitioners. His work covers CTI platform capabilities, quality assessment, relevance-based triage, and the organisational value of threat intelligence. He also investigates trust and governance in intelligence sharing between organisations, connecting technical capabilities with the practical needs of the CTI community.

Dawn Kennedy is the Manager of Cyber Threat Intelligence and Offensive Security at global mining company, Rio Tinto. Previously, Dawn has had experience supporting critical infrastructure with threat intelligence, vulnerability management and incident response. Dawn's professional interests include researching nation-state cyber threats and intelligence sharing. She maintains extensive international partnerships across industry and government, actively exchanging intelligence and insights to strengthen the collective understanding of emerging threats. Dawn brings that intelligence into adversary emulation connecting the evolving threat landscape with realistic offensive security testing.

Enrico Lovat received his PhD from the Technical University of Munich for his research on the topics of usage control and information flow tracking. He joined Siemens CERT in 2016 in the dual role of Incident Handler and Cyber Threat Intelligence Team Lead. In 2022 he moved to Siemens Technology as Principal Key Expert, supervising the research in technologies and innovations for cybersecurity services

Erhan Turhan is Cyber Defense Manager at Turkish Airlines, where he leads teams spanning 24/7 SOC operations, cyber threat intelligence, incident response, detection engineering, vulnerability management, and SOC engineering. His focus is making intelligence actionable: connecting CTI directly to detection, threat hunting, and vulnerability prioritization decisions. Before joining Turkish Airlines, he spent over a decade in DFIR, leading incident response teams, and later worked as a product manager for a digital forensics and incident response platform.

Inga Žukauskienė is the Director of Cyber Threat Management Department at National Cyber Security Centre of Lithuania. Prior to this, she worked as a cybersecurity manager in business sector and had about 20 years of experience in international relations and cybersecurity policy with history of working at Ministry of National Defence and Ministry of Foreign Affairs. In her capacity as counsellor at Cyber security and IT policy group at the Ministry of National Defence of the Republic of Lithuania she worked in the field of national cyber security policy formulation and international cyber security formats. Ms. Žukauskienė was a member of the Steering Committee of the NATO Cooperative Cyber Defence Centre of Excellence. Inga holds master’s degree in Cybersecurity Management at Mykolas Riomeris University in Vilnius, a bachelor’s degree in political science and master’s degree in international relations and diplomacy from Vilnius University. Inga supports diversity, inclusion and attraction of talents in cybersecurity and she is one of the founders and former leader of the Women4Cyber Lithuania community.

Jose Nazario, PhD, is a senior principal at Google where he works in the threat intelligence group. His main areas of focus include hacktivism, darkweb and cyber crime, and the increasing use of LLMs in cybersecurity. He has written and published extensively on cybersecurity topics in a number of papers and journals, and multiple conferences. Prior to Google Jose worked at Censys and Fastly, and a number of others in his career. 

Joseph Slowik has over 15 years of experience across multiple security disciplines, largely focused on adversary understanding and threat-focused network defense. Joseph currently works as Director for Threat Research and Cyber Engineering at Dataminr, with previous roles at the MITRE Corporation, Huntress, Dragos, and Los Alamos National Laboratory. In addition to his primary employment, Joseph also runs his own training and advisory practice focused on threat intelligence and adversary research at Paralus LLC.

Lisa Lobmeyer Blue Team Lead Lisa is leading Security Research Labs & Allurity’s incident response team. She is an experienced DFIR-Specialist, managing and building teams that help organizations affected by cybersecurity incidents while at the same time tryingto minimize the impact by advancing organizations' Cyber Defense capabilities. She aims to build a bridge from technical issues to real world impact, translating for effective decision-making in management.

Malya Jain is a Security Engineer at Meta specializing in anti-scraping security, threat intelligence, offensive security, and large-scale platform defense. She has over 14 years of cybersecurity experience across Meta, Block, ServiceNow, and KPMG, spanning digital forensics, incident response, adversarial testing, and technology risk. At Meta, her work focuses on identifying emerging abuse techniques and translating threat intelligence and offensive research into scalable security defenses. Malya is also an IEEE Senior Member, published author, conference speaker, and technical reviewer, with a particular interest in threat intelligence, adversary behavior, automated abuse, and AI-enabled security risks.

Nur Qurratu Aini Binti Rohizan (Aini) is a Cyber Threat Analyst at MyCERT, CyberSecurity Malaysia, where she tracks vulnerabilities, active exploitation, and emerging threats, and turns them into alerts and advisories. She also performs intrusion attribution and designs intelligence-driven cyber drills and tabletop exercises. Aini recently completed a M.Sc. in Cybersecurity at UMPSA, with research comparing decay models in MISP. She is GCTI certified and also holds other professional certifications.

Scott Small is a security & intelligence practitioner and expert in cyber threat intelligence & threat modeling, open source research & investigations, and data analysis & automation. He is currently the Threat Intelligence Lead at Group 1001. Scott’s prior roles involved advising enterprise and public sector security teams across maturity levels on technical and strategic applications of intelligence and on using technology to help identify and mitigate organizational risk. Throughout his career, he has briefed & trained large & small audiences, presented original content at major security conferences & other industry events, and actively contributed to the professional community & open source security projects.

Sirreh Saho is a Computer Security Incident Response Team (CSIRT) Analyst at the Gambia Computer Security Incident Response Team (gmCSIRT). Her work covers digital forensics and incident response (DFIR) and cyber threat intelligence, and she contributes to the development of The Gambia’s national cybersecurity capabilities. She has participated in international training programs, including the Incident Response CyberTrack of the Her CyberTracks program, implemented by the ITU and GIZ. Through the program, she trained alongside other professionals and exchanged experiences in incident response. She is committed to promoting cybersecurity awareness and knowledge sharing, and to increasing the participation of women in the field. In addition to her professional role, Ms. Saho is the Founder and President of Together for Autism Gambia (TFAG), a parent-led organisation that advocates for autism awareness, acceptance, and inclusion. Through TFAG, she supports autistic children and their families in The Gambia.

For all his professional business life (even years before that) Stefan has been involved in information security. In 1993 he was the first student to be hired by the freshly launched DFN-CERT Services GmbH, the first Computer Emergency Response Team in Germany and also one of the first within Europe. After having spent a number of years in the PKI universe he worked as an IT security consultant for the next 15 years before re-joining the awesome crew at DFN-CERT Services GmbH in 2016. He likes IT forensics, Cyber Threat Intelligence, and malware analysis and loves helping people.

During my research career, I pioneered mobile network security advancements through R&D, actively participated in standardization and international collaborations (including Germany). Transitioning to cybersecurity strategy, I now lead cyber threat intelligence team, particularly in strategic intelligence. Certified in CISSP and GIAC (GCTI), I regularly share expertise at global forums such as FIRST, SANS, AVAR, CTA, and MITRE.

Tobias Mainka serves as the technical lead for threat detection and response at Infineon AG, actively involved in designing the cyber threat intelligence process and building security automations. Before his current role, he was part of Siemens CERT specialising as a senior incident responder, particularly drawn to special vulnerability handling and advanced persistent threats.