Omer Farooq
Omer Farooq is the founder and CTO of Auxin.io, a Maryland-based firm specializing in Data Science, Cloud and application security, DevSecOps, System Architecture, Artificial Intelligence, Machine Learning, and data-driven Business Intelligence related services and SaaS products.Omer was named 40 under 40 by his bachelor’s Alma Mater – Stony Brook University in Stony Brook, NY.Omer leads the Cloud and Security practice at Auxin Security. He is a principal consultant with over 20 years of experience. His experience includes consulting with diverse clients, including Insurance, Banking, Media and Entertainment, Telecommunications, FinTech, Home Automation, Healthcare, Government Defense, and higher education.Omer’s primary areas of interest lie at the intersection of cloud and application security assessment, blockchain, embedded IoT and mobile software development, and system engineering. Omer has authored official security guidance for Media and Entertainment industry for public cloud providers, including Microsoft Azure, Google Cloud Platform, Amazon Web Services, and Alibaba Cloud.Omer Farooq holds a BS degree in Computer Engineering from Stony Brook University, an MS degree in Electrical Engineering from Rochester Institute of Technology, an ABD Ph.D. candidate at the Computer and Electrical Engineering department of the University of Maryland at Baltimore County (UMBC), and an eternal student in multidisciplinary studies.
Omer is an accomplished speaker, including conference presentations and panels at RSA, BSides DC, BSides San Diego, BSides DC, Vice Magazine Motherboard, and InfoSec magazine webinars. Outside of work, Omer is a history, art, automotive, and philosophy buff – who thoroughly enjoys healthy discussions with family and friends while enjoying small-batch cold brew coffee or boba tea.
Sessions
Over the past 10 years, the cybersecurity industry, including the OWASP community, has been all about risk management through Vulnerability Management. At Auxin Security, we not only think about the current holistic Vulnerability Management, but we also show how it wastes thousands of expensive engineering man-hours are wasted daily on useless metrics and data collection. This talk talks about how traditional top-down or bottom-up Vulnerability Management is flawed and outdated. Stop using it.