In this session, James will argue that while companies are tempted to start with visibility and posture management, they would be better served to start their security journey with meaningful runtime protection. James will give a brief overview of what runtime solutions exist in the market, and what combination of features are most important to building a robust real security program. If you're tired of chasing down false positives and debatable findings, you won't want to miss it!
The 1st Cloud Runtime Security Summit
CADR:CON
April 10, 2025 - San Francisco, CA
Visionaries


Shauli Rozen
CEO and Co-Founder
ARMO
Custom Speaker
Shauli is a software dev turned exec, turned entrepreneur, and the CEO & Founder of ARMO, the fastest growing open-source cloud runtime security platform. Before ARMO, Shauli was GM of Optimove, where he oversaw building the company sales department and business team, growing the company from $6M ARR to $40M. Prior to that, Shauli was director of incubation within Amdocs, building startups within the company in the fields of Security, Virtualization, Cloud and Big Data. Shauli holds a B.Sc. Major in SW Engineering and MBA from the University of Pennsylvania.


James Berthoty
Founder
Latio Tech


Kshitish Soman
Head of Security for GenAI, Cloud, Emerging Tech
Seagate


Shadaab Kanwal
MD - Digital, Data, and Analytics
Charles Schwab
Custom Speaker
SHADAAB KANWAL serves as MD Digital, Data, and Analytics at Charles Schwab, executing digital technology, data, AI, and advanced analytics strategies. NYSE:SCHW is a global investment and wealth management firm with >$8.5T(AUM) in client assets, 33M+ brokerage accounts, and a full range of banking and financial advisory services. As a transformational, strategically adaptable, and value driven leader. ★ Adept at creating vision to value, linking strategy to execution, and agile change management. ★ Executed >$300M+ mega programs of technology-led, business agility, and hyper-automation, with global teams of >300+ for Kaiser Permanente, UCLA Health, OhioHealth, MAYO Clinic, and UnitedHealth Group. ★ Passionate about team empowerment and carving innovative business capabilities, with customer360 design thinking, analytics engineering, and knowledge management.


Marc Mackey
Global IT Director
Nike
Custom Speaker
• Accomplished Technology executive with over 20 years experience leading portfolio / program / release / project management operations in both high-growth startups and large enterprise software companies with documented success in critical roles. • Built a business value driven, high performing, cross-functional PMO with geographically distributed PMO/TPM teams. • Specializes in driving business value by aligning all levels of leadership and cross-functional teams through the implementation of OKRs (Objectives and Key Results) and KPIs (Key Performance Indicators) based framework and tools. • Recognized for improving customer satisfaction by standardizing processes, procedures and removing inefficiencies to eliminate downtime. • Increased productivity by fundamentally re-architected how Product Development teams and people align and collaborate at all levels. • Experienced public speaker, reporting to C-level executives with solid strategy and presentation skills. • FDIC and OCC presence and presentations for National Bank Charter for Technology.


ANAND THANGARAJU
Field CISO
ePlus


Dennis Barnes
AVP IT Infrastructure & Security
SF Fire Credit Union
Custom Speaker
Dennis Barnes, is a highly accomplished Information Security Officer with over 20 years of experience in IT leadership. Known for his expertise in driving enterprise IT security protection, Dennis has a proven track record of steering enterprise-wide security strategies and programs to enhance organizational security posture. He excels in translating complex technical terms into easily understandable language and is a strategic advisor to business leaders. Dennis has a history of influencing leadership buy-in on cutting-edge strategies and initiatives, and he is seasoned in solving technical security challenges, including mitigating cyber attacks. Throughout his career, Dennis has managed teams of up to 200 people and budgets of up to $75M. Holding certifications including Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Ethical Hacker (CEH), Project Management Professional (PMP), and ITIL, Dennis has a wide range of expertise in compliance frameworks such as ISO 27001, NERC CIP, NIST, PCI, HIPAA, and FIPs 140-2. In his most recent role as VP of Infrastructure and Security at San Francisco Fire Credit Union, Dennis oversees the management of IT infrastructure and security for the credit union, ensuring robust protection. Prior to this, as the Chief Information Security Officer at Cooper Compliance, Dennis deployed advanced security technologies and conducted security assessments to enhance customer environments and ensure compliance with NERC CIP regulations. He led the development of security policies and procedures, implemented user awareness training programs, and established key vendor relationships to drive security investments efficiently. With a strong commitment to excellence and a wealth of experience in information security leadership, Dennis continues to drive innovation and advance cybersecurity practices in the industry.


Herman Brown
CIO
SF District Attorney's Office


Jonathan Chan
Head of Global IT and Security
Episource


Mimoh Das
VP of IT & Systems
San Francisco SPCA


Melina Taylor
Director of IT
Hopelab


Gilles de Bordeaux
CIO
Smart Bumper Sticker, Inc.


Samhitha Upadhya
VP Product Manager
Bank of America


Steve Zalewski
Former CISO
Levi Strauss & Co.
Custom Speaker
Mr. Zalewski currently provides CISO, security consulting and security advisory services. These include: • International cybersecurity advisor and trainer. • Executive advisory board member for security startups, providing guidance on security market direction and product requirements. • CISO advisory board member for venture capital firms internationally. • vCISO for companies requiring temporary or part-time CISO expertise. Services also include guidance and solutions to address incident response, security program design, security assessment, security due-diligence, vendor/supplier due-diligence, security architecture review, board reporting and other key security leadership requirements. Operational experience in Healthcare, Utilities and International Retail verticals. Key Strengths: •Organizational Management •Strategic Planning & Execution •Enterprise Security Architecture/Strategy •Executive and BOD Security Governance/Reporting •Cybersecurity Incident Response •Security Risk & Compliance Management Additionally, I co-hosts the CISOSeries Defense-in-Depth Podcasts and am a frequent speaker and panel moderator at industry events.


Aladdin Elston
Executive Director, Senior Lead Cybersecurity Strategist
Wells Fargo
Custom Speaker
Founded in 2012 and headquartered in Southfield, Michigan, Altimetrik is a software company that provides business transformation and technology solutions to enterprises.


Todd Dekkinga
CISO
Cyber Way US
April 10, 2025
Attend this event
Agenda
All times Pacific Time
8:30 AM-9:00 AM
Welcome & Registration
9:00 AM-9:15 AM
Opening Remarks
9:15 AM-9:40 AM
Vision Voices
The Future of Cloud Security Must be Runtime


James Berthoty
Founder
Latio Tech
9:45 AM-10:20 AM
Keynote
A New Era in Cloud Runtime Security: Cloud Application Detection & Response
Detecting and responding to cloud attacks has never been more challenging. Modern attacks and the ever-changing nature of cloud infrastructure and applications make security teams' lives more difficult than ever.
A new approach is needed - one that can provide a fully traceable & explainable runtime security story spanning the entire cloud technologies stack.
10:20 AM-10:40 AM
Networking Break
10:40 AM-11:25 AM
Panel
The Modern CISO Strategy and Priorities: Protecting Cloud Infrastructures and Applications Against Modern Attacks
In recent years, we have added more and more tools to protect our cloud infrastructures and applications , but are we really more secure?
Traditionally, we started with the cloud security posture, but was that the right move?
The cloud security market has grown and changed significantly - from CSPM, to ASPM and CNAPP. It seems that every few months a new category is popping up. But what is still missing? Where should we focus next? posture or runtime? shift left or protect right?
Panelists


James Berthoty
Founder
Latio Tech


Shauli Rozen
CEO and Co-Founder
ARMO


Aladdin Elston
Executive Director, Senior Lead Cybersecurity Strategist
Wells Fargo