RVAsec 15: Full Schedule

Streaming: https://mssvideo.vcu.edu/RVAsec

11:00am EDT

Empathy, Not Telepathy: How Embedded Engineering Teams Scale Cyber Response

Tuesday June 9, 2026 11:00am - 11:50am EDT

The real issue of AI isn't just the speed of the adversary, but the unprecedented noise they’ve created which makes finding the signal through traditional means nearly impossible. This talk explores how embedding engineers into the cyber lifecycle helps drown out the noise and empowers analysts to focus on high-leverage response at scale.

Speakers

Kyle Flaherty

Head of Cyber Intelligence Engineering, Capital One

Kyle is based out of Richmond and leads the Cyber Intelligence Engineering function at Capital One, where his teams work directly with Cyber Intelligence Analysts to empower them to respond at scale.

Kyle has spent 7 years at Capital One and has prior security work with the U.S. Navy and NSA. His interest in Cyber is rooted in service: a love for technology combined with a desire to serve, inspired by growing up in a military family. Kyle holds a degree in Computer Science from... Read More →

Tuesday June 9, 2026 11:00am - 11:50am EDT
Upstairs, Grand Ballroom D/E

Business

1:00pm EDT

Secure by Design, Trusted Through Compliance

Tuesday June 9, 2026 1:00pm - 1:50pm EDT

Upstairs, Grand Ballroom D/E

This talk will challenge listeners to redefine the traditional technical vs compliance mindset and thing of security as risk management. Whether it's technical or contractual risk we should all be focused on the same goal of reducing material impacts to our organizations. It will walk through a model in which compliance is built upon strong technical foundations and becomes a mechanism for communicating trust to your organization, customers, and regulators

Speakers

Michael Darling

Principal Consultant, Solstice Security

As CEO of Solstice Security, Michael Darling delivers exceptional results with 25+ years of leadership across federal government, military, and private sectors As CISO at Venable LLP, one of the biggest law firms in the world, he built and executed a $15M+ comprehensive security... Read More →

Tuesday June 9, 2026 1:00pm - 1:50pm EDT
Upstairs, Grand Ballroom D/E

Business

2:00pm EDT

No Breach Required: $52 Million in Cybersecurity Fraud Settlements Built on Paperwork, Not Incidents

Tuesday June 9, 2026 2:00pm - 2:50pm EDT

Upstairs, Grand Ballroom D/E

We present original research quantifying the gap between what federal contractors certify about their security posture and what vulnerability telemetry actually shows, combining data science with False Claims Act enforcement analysis to estimate the real FCA exposure across the defense industrial base. We then ask whether the industry's own risk-scoring tools, built to make triage rational, are inadvertently building the evidentiary record that makes fraud prosecution easier.

Speakers

Max Voldman

Partner, Whistleblower Partners LLP

Max Voldman is a partner at Whistleblower Partners LLP, in Washington DC. Max’s practice is focused on representing whistleblowers under the federal False Claims Act and numerous state law equivalents, and the whistleblower programs of the Securities and Exchange Commission. Max... Read More →

Michael Roytman

Chief Technology Officer, Empirical Security

Michael Roytman is the CTO of Empirical Security. Previously, he was the Chief Data Scientist of Kenna Security, and a Distinguished Engineer at Cisco. He served on boards for the Society of Information Risk Analysts, Cryptomove, and Social Capital. He was the co-founder and executive... Read More →

Tuesday June 9, 2026 2:00pm - 2:50pm EDT
Upstairs, Grand Ballroom D/E

Business

3:00pm EDT

Gigawatts and Governance: The Data Security Crisis No One Is Talking About

Tuesday June 9, 2026 3:00pm - 3:50pm EDT

Upstairs, Grand Ballroom D/E

Gigawatts of power. Trillions in investment. A data security crisis hiding in plain sight. The explosive growth of AI data centers has created an infrastructure layer most security frameworks were never designed to govern. When ownership of that infrastructure determines who truly controls the data inside it, conventional perimeter thinking is not enough. This session makes the case that infrastructure governance is the defining data security challenge of our generation.

Speakers

Nancy Coblenz

President, Stellenium

Nancy Coblenz is President of Stellenium Corporation and Co-Founder of Family Office Group. Her work sits at the intersection of AI infrastructure, national digital policy, and full-stack systems deployment across emerging markets.

With over 15 years in technology strategy and large-scale systems implementation, Nancy previously served as CEO of MyBrand AI, an enterprise AI strategy and implementation firm. Prior to that, she held executive leadership roles in private equity and a multibillion-dollar global... Read More →

Tuesday June 9, 2026 3:00pm - 3:50pm EDT
Upstairs, Grand Ballroom D/E

Business

10:30am EDT

Breaking Your Silence: How to Build Influence Without Becoming a "Suit"

Wednesday June 10, 2026 10:30am - 11:20am EDT

Upstairs, Grand Ballroom D/E

In security, we’re taught to let our work speak for itself. But in the real world, "silent" expertise usually gets ignored, underfunded, or misunderstood. Whether it’s imposter syndrome whispering that your latest exploit wasn't "elite" enough or the hesitation to share a tool you built, these internal blockers limit your impact. This session is about moving past the "quiet professional" trap and building a reputation that matches your technical depth without losing your soul to corporate

Speakers

Heather Antoinetti

Founder and CEO, Ah-Ha Marketing

Heather Antoinetti is the CEO and founder of Ah-Ha Marketing, a boutique agency specializing in helping technical experts and thought leaders in the cybersecurity and technology sectors amplify their voices and establish authority. With nearly two decades of global marketing experience... Read More →

Wednesday June 10, 2026 10:30am - 11:20am EDT
Upstairs, Grand Ballroom D/E

Business

11:30am EDT

Alert Fatigue Is a Misdiagnosis

Wednesday June 10, 2026 11:30am - 12:20pm EDT

Upstairs, Grand Ballroom D/E

"Alert fatigue" is a misdiagnosis of a deeper problem: the cognitive decay of the human defender. This talk brings the receipts on how a high-consumption information diet hijacks the prefrontal cortex — and why the answer isn't more automation, but rebuilding the creative muscle that makes humans worth keeping in the loop.

Speakers

Kim Mahan

Founding Apprentice, MAXX Potential

Kim Mahan is the Founding Apprentice at MAXX Potential, a technology consulting firm whose "earn-while-you-learn" model has produced hundreds of engineers‚ including cybersecurity professionals now at Capital One, AWS, Google and beyond. A CISSP and Six Sigma Black Belt with 20... Read More →

Wednesday June 10, 2026 11:30am - 12:20pm EDT
Upstairs, Grand Ballroom D/E

Business

1:00pm EDT

Everything Everywhere All At Once: Untangling Security & Privacy Risks Across Today’s AI Tools

Wednesday June 10, 2026 1:00pm - 1:50pm EDT

Upstairs, Grand Ballroom D/E

AI adoption is exploding—but the security promises behind these tools often don’t match the fine print buried in their terms, models, or data flows. This talk cuts through the hype with a no‑B.S. look at the real privacy and security risks across today’s major AI platforms, and gives business leaders and security professionals a clear roadmap for deciding what’s safe, what’s risky, and what’s simply not ready for prime time.

Speakers

Jon Waldman

President, SBS CyberSecurity

Jon Waldman is the Co-Founder and President of SBS CyberSecurity, where he oversees the SBS service teams and the SBS Institute. For more than 20 years, Jon has helped hundreds of organizations identify and understand cybersecurity risks to allow them to make better and more informed... Read More →

Wednesday June 10, 2026 1:00pm - 1:50pm EDT
Upstairs, Grand Ballroom D/E

Business

2:00pm EDT

Swatting Flies With Sledgehammers: Broken TPRM Programs and How To Fix Them

Wednesday June 10, 2026 2:00pm - 2:50pm EDT

Upstairs, Grand Ballroom D/E

Third-party and supply chain risk is more important now than ever—but TPRM is also more broken and ineffective than ever. This session will review today’s common approaches to TPRM, how we got here, and how we can achieve better outcomes and reasonable assurance with less work. We’ll also explore what that shift could mean for our security programs—and for the industry as a whole. We need a hard reboot, and it has to start with each of us.

Speakers

Brian Markham

CISO, EAB Global, Inc.

Brian Markham is an executive, advisor, hacker, and mentor with over 25 years of experience in IT and cybersecurity. Brian currently serves as the Chief Information Security Officer for EAB Global, a leading provider of software, marketing, and research services to institutions of... Read More →

Wednesday June 10, 2026 2:00pm - 2:50pm EDT
Upstairs, Grand Ballroom D/E

Business

11:00am EDT

1:00pm EDT

2:00pm EDT

3:00pm EDT

10:30am EDT

11:30am EDT

1:00pm EDT

2:00pm EDT

Get help with the event