I'm Brad Geesaman 👋, a cloud and AI native security engineer who's been at this for 24+ years.
Most recently, I spent four years at Ghost Security as a Principal Security Engineer and Forward Deployed Engineer, building AI agents that do real AppSec work for enterprise teams across more than 15,000 repos. Those agents also found a high-severity CVE.
I enjoy getting deep into using LLMs and AI agents to take the toil out of AppSec, and talking about it on The Boring AppSec Podcast and Scale to Zero.
Most of my conference talks are in one playlist.
In the past, I've been:
- building on,
- attacking, and
- hardening
- Kubernetes,
- Google Cloud, and
- AWS environments.
I've also enjoyed:
- finding and reporting vulnerabilities,
- evaluating features and capabilities for their security posture,
- demonstrating weaknesses through hands-on walkthroughs, and
- developing educational materials for end users so they can protect their own environments.