Erez Yalon
VP of Security Research • Checkmarx
Israel •
$1,501 - $5,000
About
Spreading security awareness is my mission. I tell an engaging, informative, and inspiring story that blends the attacker mindset that makes the room lean in with builder-focused guidance teams can actually apply. I walk audiences through how real attacks unfold, then translate that into practical design patterns, test cases, and program moves that fit how software is built and shipped. Expect a clear narrative, a few “wait, that’s possible?” moments, and concrete take-home messages that engineers can use and leaders can support. No hype, no fear, and no vendor pitch.
Speaking Topics
Signature Programs (9)
Format: Keynote or breakout (30 to 60 min) Audience: Broad (technical and non-technical) A high-energy session that demystifies how attackers think: reconnaissance, trust abuse, chaining small weaknesses, and turning “minor” issues into impact. Every story ends with a defensive lesson and what to change. Take-home messages: - How attackers turn small cracks into big outcomes - Why “it’s just a bug” is often the wrong mental model - Habits that raise the cost of attack
Format: Keynote or breakout (30 to 60 min) Audience: AppSec, platform, engineering leaders, product security I walk through a modern supply chain attack the way an attacker would, step by step, focusing on how small trust assumptions compound into a full compromise. Then I translate the attack path into practical defenses that fit real build pipelines and developer workflows. Take-home messages: - A simple mental model for where supply chains break, from source to build to publish - Controls that pay off fastest, even in imperfect environments - How to test your pipeline like an attacker and prove improvements
Your Experience with Erez
Your perspective matters!
What was it like engaging with Erez?
