SecureWorld Detroit 2022

Stephen Dougherty has over a decade of investigative experience. His career as a Financial Fraud Investigator in support of the federal government has played a pivotal role in criminal investigations, surrounding cyber-enabled financial crime, money laundering, human trafficking, identity theft, healthcare fraud, embezzlement, tax/government program fraud, dark web crimes, among others. Stephen’s main area of expertise is combatting money laundering in all its forms. Aside from this, Stephen has been proactive in identifying new and future trends in the world of financial crime. Such trends include the cyber security nexus of financial crimes and its ever-growing relationship in major financial crimes such as Business Email Compromise and the rise of the dark web and the use of virtual currency as a vehicle for facilitation of financial crimes. Stephen has been a leader and a mentor to other investigators teaching them how to uncover fraud internally and externally. Stephen is currently an investigator contracted to the U.S. Secret Service’s Global Investigative Operations Center (GIOC) in Washington D.C.

Joshua Seney is a Network Intrusion Forensic Analyst with the U.S. Secret Service Criminal Investigative Division. Joshua has over 27 years of law enforcement experience and retired as the Sergeant of Detectives from a local agency. He has conducted forensic examinations for criminal, civil, and insurance related matters, while serving in both the government and private sectors. He is currently assigned to the Detroit, Michigan Field Office in the Electronic Crimes Task Force (ECTF) Digital Evidence Forensic Lab.

Paul Rapier, Vice President of IT for the Detroit Pistons, is a seasoned technology leader with 25 years of IT experience, including a decade in management. Known for his expertise in driving innovation within the sports industry, Paul actively shares his knowledge as a sought-after speaker at cybersecurity conferences and contributes to technology-driven initiatives in professional sports. He also serves on the Advisory Council for SecureWorld Detroit, where he helps shape cybersecurity standards and practices. His diverse skill set enables him to craft IT strategies that enhance efficiency and competitiveness.

Creating value-add business outcomes through security and privacy design is the core of my professional mission. I prioritize understanding my clients’ organizational goals and culture to ensure their infrastructure and processes reflect their ethos. As an IT-to-business translator with extensive technical and business advisory experience, I have successfully led audits testing controls from standards such as NIST CSF, ISO 27001, GDPR, and PCI-DSS. My contributions to the security community include publications in ISSA Journal and CSOonline, and presentations at RSA Conference, Blackhat Executive Summit, and DefCon. As a member of the SecureWorld Expo Advisory Committee, I remain actively engaged in advancing the field of cybersecurity.

Daniel P. Shoemaker, PhD, is a Full Professor and Director of the Graduate Program in Cybersecurity at the University of Detroit Mercy, where he has worked for over 35 years. He has retired from his administrative position as Department Chair, PI for the NSA Center and Subject Matter Expert for DHS and NIST. He is enjoying more time with his students and writing. He has published over 200 cybersecurity papers and articles as well as this list of books:
• Cybersecurity “The Essential Body of Knowledge”
• “The CSSLP Certification All-in-One Exam Guide”
• Cybersecurity “Engineering a More Secure Software Organization”
• “A Guide to the National Initiative for Cybersecurity Education (NICE) Framework: The Complete Guide to Cybersecurity Risk & Controls in Cyber Security”
• ”Implementing Cybersecurity: A Guide to the NIST Risk Management Framework”,
• “Supply Chain Risk Management: Applying Secure Acquisition Principles to Ensure a Trusted Product”
• “How to Build A Cyber Resilient Organization”
• “The Complete Guide to Cybersecurity Risks and Controls”
• Information Assurance for the Enterprise: A Roadmap to Information Security”
• “The Cybersecurity Body of Knowledge”
• “The ACM/IEEE/AIS/IFIP Recommendations for a Complete Curriculum in Cybersecurity”

Tamara’s primary mission is to address the shortage of specifically educated and trained cybersecurity professionals across Michigan. She focuses on K-12 Education with the CyberPatriot Program and Recruiting, Retaining, and the Advancement of Women leading the Michigan WiCyS Affiliate’s programs.

She has facilitated the MCISSE Center’s unique engagement in cybersecurity teaching at the middle and high school level, and through innovative cybersecurity summer camps. In conjunction with this program, she created a digital badging system to further motivate and distinguish Michigan CyberPatriot participation, which is the first of its kind in the nation. She and her husband, Dan Shoemaker, published a groundbreaking book for Secondary school teachers entitled “Teaching Cybersecurity” with CRC Press.

In June, women from across Michigan stood up the Michigan WiCyS Affiliate and Tamara is leading that charge as President. WiCyS is a global Association that promotes Recruiting, Retaining, and Advancing Women in Cybersecurity, which fits seamlessly into Tamara’s life’s work. She encourages you all to get in the GAME, volunteer, and help ensure we can all properly retire someday!

Leader of Training & Development for the Auto-ISAC ACT program. Owner/Principal of Heimer & Associates LLC. Senior Technical Advisor for Cybersecurity to Michigan Economic Development Corporation (MEDC) Auto Office and Michigan Defense Center. Founder of CyberAuto, CyberTruck, CyberBoat Challenges; assisted in the creation of the CyberTractor Challenge. Advisory Board member of: Walsh College’s Automotive Cybersecurity Program, SAE journal of Transportation Cybersecurity and Privacy, and Metro Detroit Regional Vehicle Cybersecurity Institute.

Experienced Cybersecurity Specialist with a demonstrated history of working in the automotive industry. Skilled in Business Process, Analytical Skills, Operations Management, Management, and Continuous Improvement. Strong program and project management professional with a Bachelor of Business Administration (BBA) focused in Business Administration and Management, General from Baker College Center for Graduate Studies.

One of the most influential voices in cybersecurity and is credited with inventing the term ASM at Gartner. Brad is a former top-rated Gartner analyst for cybersecurity and threat intelligence, veteran of U.S. Cyber Intelligence, Dell, IBM, Kasada evangelist and product leader.

Head of Information Security Governance

Mary’s several years of leadership experience encompasses many areas of cybersecurity with a focus on IT risk management, IT audit, security awareness training, vulnerability management and incident response. Her extensive information security background includes working at Henry Ford Health System, Comerica Bank, WorkForce Software, Learning Care Group and most recently, Raytheon Technologies, where she continues to build and mature the company’s Cyber 3rd party risk program. Mary is a graduate from Walsh College with a Master’s degree in Business Information Technology, Information Assurance and holds several certifications including CISSP, CISA and CRISC.

Ryan Mostiller is a security leader in the Metro Detroit community, currently serving as the Security Operations Manager for BorgWarner. After more than a decade in both technical and management roles in security, Ryan enjoys any opportunity to engage with fellow practitioners and share learnings. Ryan has worked across various industries and within several Fortune 500 companies, most recently in the automotive industry.

Ryan has a Masters in IT Management from Oakland University and bachelors in Information Technology, along with security certifications from GIAC. You may have seen other presentations that Ryan has created and presented at, including SecureWorld, GrrCON, ISC2, and Evanta. Ryan has also developed and teaches an OU Executive MBA course at Oakland University titled "Cybersecurity for Executives."

Chris LaFleur has spent the last three years working to prevent and eradicate threat actors such as Ryuk, Conti, and Lockbit. Chris began his career at Trend Micro in Threat Support, and is now running the Incident Response team. He was a key part of the making a method on how to predict customer attacks with the Smart Protection Early warning Service from Trend Micro. Chris has built a team of dedicated personal that can go into any environment and hunt out threats without needing to rely on just vendor only EDR/XDR tooling to kill the threat actors ability to cause damage.

Chris has an AS degree in IT solutions from Keiser University, along with AWS and VMWare certifications, coupled with his hands-on experience over the last decade. Chris has always led with the belief that the customer comes first no matter who or what may have caused it. Keeping an attitude that IR work is much like working in a trauma center as a doctor. We don't get to choose what comes next or how long it will take, but we do not stop until the job is complete.

Yanek Korff has served in information technology or security roles for over 20 years. Starting out as a student help desk tech in a musty library basement in college he is now co-founder and Chief of Staff at Expel, a DC-area cybersecurity company that makes security easy to understand, use, and continuously improve.

Yanek began his professional career as a systems administrator at Bell Atlantic and then Cigital. He moved on to Aol where he transitioned into a management role and eventually became responsible for much of Aol’s security infrastructure. In 2010, he joined Mandiant to build a new managed services business line to help customers mitigate the impact of security breaches conducted by state-sponsored attackers.

Yanek graduated with a Computer Science degree from William and Mary, a Masters in the Management of Information Technology from the McIntire School of Commerce at the University of Virginia and was the principal author for Mastering FreeBSD and OpenBSD Security, published by O’Reilly.

Yanek lives with his family in Vienna, Virginia with three dogs and as many fish and corals as he can fit into a 300 gallon saltwater aquarium. When he’s not fully engaged with Expel business, he’s likely on vacation or playing video games. Because he’s apparently still ten years old on the inside.

Rick Rutledge has been in the Security space for more than 15 years. He has moved from working in the N.O.C. of a fortune 500 company to designing network and security infrastructure of a fortune 20 company to selling security solutions to hundreds of companies across all verticals and sizes. His previous experience with both support and design of some of the largest networks in the world give him a unique insight to a majority of the problems we face today.

Neil is a 25+ year veteran of the information technology and cybersecurity field. Forging technology environments that support security to protect business is Neil’s passion. Currently Neil is working with Cybereason to enable customers and partners to use industry leading tooling in incident response engagements and ongoing production environments. Prior to joining Cybereason, Neil helped to build a multi-million dollar cybersecurity practice for SageNet Corporation. He is known for challenging the people around him to find more secure ways to accomplish any and all projects he comes into contact with. Neil has extensive project management and hands-on experience in cyber risk management, network security, SIEM and SOC deployment and management, data loss prevention, incident response, electronic discovery, penetration testing and data governance and privacy. He has spent many years securing both the healthcare, big-pharma, and banking industries among others.

Mary’s several years of leadership experience encompasses many areas of cybersecurity with a focus on IT risk management, IT audit, security awareness training, vulnerability management and incident response. Her extensive information security background includes working at Henry Ford Health System, Comerica Bank, WorkForce Software, Learning Care Group and most recently, Raytheon Technologies, where she continues to build and mature the company’s Cyber 3rd party risk program. Mary is a graduate from Walsh College with a Master’s degree in Business Information Technology, Information Assurance and holds several certifications including CISSP, CISA and CRISC.

Micki Boland is a cybersecurity warrior and evangelist with Check Point Software Technologies Office of the CTO. A practitioner with 20 years in IT, cybersecurity, emerging technology innovation, Micki holds ISC2 CISSP, Master of Science in Technology Commercialization from the University of Texas at Austin, MBA with Global Security concentration from East Carolina University.

Juman Doleh-Alomary is BorgWarner's Chief Information Security Officer and an active volunteer board member of the ISACA Detroit Chapter.  With over 15 years of experience in security, audit, investigation, compliance, and privacy policy/standards,

Juman most recently held the position of Director of Cybersecurity GRC at Little Caesar's Enterprises serving the Ilitch holdings portfolio of companies. Her prior positions include Director of IT Audit at Wayne State University and a significant tenure in IT and Risk Management at Ford Motor Company.

A leader within the ISACA community, Juman has held various roles, including past president and, notably, chair of the IIA/ISACA Spring Conference, which achieved a record attendance. She is active volunteer with Michigan Council of Women in Technology (MCWT), Women Security Alliance (WomSA), and on the advisory board of Women in Cyber (WiCyS) Michigan. 

An alumnus of the University of Michigan, she holds both a bachelor’s and a master’s degree, complemented by an impressive suite of certifications: CISA, CISM, CRISC, CDPSE, and ISO 27001.

Emerging Tech, Media, IP, Privacy & Cyber Shareholder

Samatha has 19+ years of experience in Enterprise technology with proven expertise in architecting, delivering, and maintaining complex projects in distributed environments.

Arun DeSouza is currently Chief Information Security & Privacy Officer at Nexteer Automotive Corporation. Arun has extensive global IT and security leadership experience. His interests include the Internet of Things (IoT), security analytics, blockchain, and quantum computing. Arun’s areas of expertise include strategic planning, risk management, identity management, cloud computing, and privacy. Arun earned M.S. and PhD degrees from Vanderbilt University and is a Certified Information Systems Security professional (CISSP). He has won multiple industry honors: CSO50 Award, Computerworld Premier 100 IT Leaders Award, CIO Ones to Watch Award, and Network World Enterprise All Star Award.

Mr. Aiello holds a BA in Technology Management and a Master's of Science with a concentration in Information Assurance.

Barbara leads the Global Security Awareness/Phishing program to reduce risk and improve the cybersecurity culture at Steelcase. This includes creating content for employee awareness articles, training classes, and conducting multi-language phishing simulation and reporting.

Prior to joining Steelcase, Barb was the Information Security-Governance Manager at Perrigo; the Information Security Director and the Deputy Director for IT at Kent County, Michigan; and Tech Director for Grandville Public Schools. She co-founded the West Michigan Cyber Security Consortium (WMCSC). She served on the Board and worked part-time for Cybercrime Support Network (CSN), whose goal is to bring a voice to and serve the victims of cybercrime.

Barb holds a BA degree in Telecommunications from Michigan State University, Certified Information Privacy Technologist (CIPT), GIAC Security Leadership Certification (GLSC) and the GIAC Critical Controls Certificate (GCCC), GIAC Law of Data Security & Investigations (GLEG), and ITIL2 Foundations and Change Management certifications.

Andy Brush is the program director for Michigan Cyber Partners. In this role, Andy seeks to improve the cybersecurity posture of governments across the state by finding innovative ways of working together across sectors both locally and nationally. Prior to joining the State of Michigan, Andy served Washtenaw County for 17 years in various roles, including Webmaster, Knowledge Manager, and Innovations Manager, and seven years as the head of the IT organization. Andy has also worked as a managing consultant, technical writer, project manager, teacher, cherry tree shaker operator, and Peace Corps volunteer in Sri Lanka.

Jaclyn is a strategic security leader and advisor working with companies who are building and scaling their security programs in the tech and healthcare industries. With 19 years of experience, she has dedicated her career to building sustainable and secure digital transformations. Additionally, she specializes in building teams to meet the constantly changing demands on technology and of data protection requirements, and spends time mentoring young professionals and women in cybersecurity career development and leadership.

Experienced leader with a demonstrated history of expertise in risk, compliance, and security. Strong builder, collaborator, and mentor who applies security fundamentals in the context of business objectives and requirements.

Dean Agron is a cybersecurity expert with over 15 years of experience in the industry. He’s known for his expertise in identifying market gaps, and in being able to clearly articulate complex and highly technical topics. Prior to co-founding Oxeye, Dean led the strategic consulting group at Kayhut, a cyber-security service provider, and held executive, leadership and engineering roles at Imperva and Checkpoint.

Peter is a sales and systems engineering professional with more than 37 years experience with a solid track record. Dedicated to the success of the organization and extended account teams and driving continuous customer satisfaction. Maintained a track record of excellence by going above and beyond to provide goal oriented solutions to business challenges.

Barbara leads the Global Security Awareness/Phishing program to reduce risk and improve the cybersecurity culture at Steelcase. This includes creating content for employee awareness articles, training classes, and conducting multi-language phishing simulation and reporting.

Prior to joining Steelcase, Barb was the Information Security-Governance Manager at Perrigo; the Information Security Director and the Deputy Director for IT at Kent County, Michigan; and Tech Director for Grandville Public Schools. She co-founded the West Michigan Cyber Security Consortium (WMCSC). She served on the Board and worked part-time for Cybercrime Support Network (CSN), whose goal is to bring a voice to and serve the victims of cybercrime.

Barb holds a BA degree in Telecommunications from Michigan State University, Certified Information Privacy Technologist (CIPT), GIAC Security Leadership Certification (GLSC) and the GIAC Critical Controls Certificate (GCCC), GIAC Law of Data Security & Investigations (GLEG), and ITIL2 Foundations and Change Management certifications.

Or Katz is a security veteran, with years of experience at industry leading vendors, currently serves as principal lead security researcher for Akamai. Katz is a frequent Speaker in security conferences such as SecTor, OWASP global events and various BSides events. Katz also published numerous articles, blogs and white papers on threat intelligence and defensive techniques. Data driven security researcher that is constantly looking on how to move security challenges into the science and solutions space.

Kathleen Kuczma (she/her) is a Senior Solutions Consultant with Recorded Future. Her prior experience includes 3.5 years as an Intelligence Analyst within the U.S. Department of Defense where she specialized in counterterrorism, digital forensics, and nation-state cyber threats. In her current role, Kathleen uses her intelligence background to run efficient and impactful demos for a variety of audiences.

Mr. Aiello holds a BA in Technology Management and a Master's of Science with a concentration in Information Assurance.

Chahak Mittal is a Certified Information Systems Security Professional (CISSP) and Manager of Security Engineering at The Learning Care Group. Chahak is deeply committed to knowledge sharing and community engagement. She has actively contributed to the cybersecurity ecosystem through her roles as a Judge at Major League Hacking (MLH) Hackathons and a dedicated Cybersecurity Teacher in the Microsoft TEALS Program. Chahak's active involvement in organizations such as the Cybersecurity Collaboration Forum and SecureWorld's Detroit Advisory Council has been instrumental in her pursuit of staying at the forefront of industry trends and challenges. She has also channeled her insights into thought-provoking cybersecurity articles, published on SecureWorld.io, making a meaningful contribution to the field's intellectual discourse. Chahak's commitment to diversity and inclusion in cybersecurity is unwavering. She has actively participated in organizations like Women in Cybersecurity (WiCyS) and the Michigan Council of Women in Technology (MCWT), where she has championed the cause of gender diversity within the field. Her outreach efforts extend to interviews on prominent media platforms like PBS Channel and the Women in Technology podcast, where she has shared her insights to inspire young girls to consider cybersecurity as a viable and rewarding career path.

J. Wolfgang Goerlich is an active part of the Michigan security community. He hosts a YouTube video series and the Encode/Decode Security podcast. Wolfgang regularly advises on and presents on the topics of risk management, incident response, business continuity, secure development life cycles, and more.

Prior to his current role, Wolfgang led IT and IT security in the healthcare and financial services verticals. He has held VP positions at several consulting firms, leading advisory and assessment practices. He is an active part of the security community, and regularly advises on and presents on the topics of security architecture and design.