Find Expert Speakers

Throughout his 25-year career in the IT field, Eric has sought out and held a diverse range of roles. Currently the Chief Identity Architect for Semperis; Eric previously was a member of the Security Research and Product teams. Prior to Semperis, Eric worked as a Security and Identity Architect at Microsoft partners, spent time working at Microsoft as a Sr. Premier Field Engineer, and spent almost 15 years in the public sector, with 10 of them as a technical manager.Eric is a Microsoft MVP for security, recognized for his expertise in the Microsoft identity ecosystem. His security research has also been recognized by Microsoft, most notably for his findings he dubbed “UnOAuthorized”. Eric is a strong proponent of knowledge sharing and spends a good deal of time sharing his insights and expertise at conferences as well as through blogging. Eric further supports the professional security and identity community as an IDPro member, working as part of the IDPro Body of Knowledge committee.

I build and break Identity Systems for a living. With 14 years in Cyber Security, I’ve worked across Identity & Access Management (IAM), Non-Human Identities Security, Endpoint Security, Data security, and Cloud Applications Security focusing on how access really works versus how we think it works.

I'm an engineer from Turkey, who is interested with biotechnology, computer science and digital gaming.So far, I made over 2million$ from bug bounty on multiple platforms like Synack, Bugcrowd and HackerOne combined.

I'm Nithin Ellanki, Chief Engineer at Vanguard. I write about the big shifts happening in AI, but I skip the benchmark recaps everyone else is doing. What interests me more is a simpler question: as the specs move this fast, where do the rest of us actually fit?My take is that staying relevant right now has less to do with out-coding a machine and more to do with knowing why you're doing the work in the first place. Judgment. Ethics. The oversight that's hard to hand off to a model. That's what I talk about: how we keep adapting as these systems get more autonomous, without losing the human decisions at the center of it.

I spoke at CONFidence 2025, one of the most established infosec conferences in Central Europe. My talk focused on advanced API authorization vulnerabilities and practical exploitation techniques, drawing from real-world engagements. I’ve compressed years of pentesting and secure code review experience into research-driven content and I’m eager to bring more of that to the stage.

I am an R&D Software Engineer at WSO2, where I build secure, scalable, and cloud-native enterprise software with a focus on API platforms, distributed systems, and AI-driven technologies. I hold a Bachelor's degree in Computer Engineering with a GPA of 3.95, and my work centers on the intersection of application security, enterprise AI, and modern software architecture.My research and engineering interests include Zero Trust security, AI agent security, API security, identity and access management, and the Model Context Protocol (MCP). I am passionate about helping organizations build trustworthy AI systems that securely interact with enterprise applications and cloud infrastructure.I have been selected as a speaker at FOST Munich 2026 (APIDays Munich), where I present on production-ready AI agents and the Model Context Protocol, and at FOST Toronto 2026, where I present "Zero Trust for AI Agents: Security Patterns Every MCP Server Needs," focusing on practical security patterns for securing AI agent ecosystems and enterprise MCP servers.Through my work and community contributions, I enjoy sharing practical knowledge, real-world engineering experiences, and emerging security practices that help developers and security professionals build resilient, secure, and production-ready software systems.