© Mapbox, © OpenStreetMap

Speaker

Sean Juroviesky

Sean Juroviesky

Senior Security Engineer - SoundCloud

Chicago, Illinois, United States

Actions

Sean is a Security Architect, Author, and Security Researcher who’s spoken at conferences across the world including DEF CON, RSAC, CypherCon, NDC Security, CornCon, BSides Rochester, SecretCon, Sec-T, and more. Beyond their professional pursuits, Sean finds joy in backpacking through the mountains with their adventurous Australian Shepherd, partner, and twins.

Area of Expertise

  • Information & Communications Technology
  • Media & Information

Topics

  • cybersecurity
  • MarTech
  • IAM
  • Privacy
  • non-human identities
  • Infrastructure as Code

Hacking other teams using social skills; to strengthen your IAM Program

We know how much of a necessity IAM is to a security program, however we often have difficulty convincing other departmental leaders and their teams of this. We both want to simplify, automate, and understand access, this is actually mutually beneficial
If you’ve built an IAM program you know just how hard it is to figure out who needs access to what, which rogue SaaS apps your company is using (hint it’s all of them), how many redundant apps there are, who owns which apps, and most importantly who has to much access making them a cushy target. To get a decent picture of what software inventory you have and how the current provisioning of access works. You will need to build direct relationships with key members from each department if not someone from every team at your company. How do you get this done, what strategies can you use to get them to open up and help you understand their workflows and the access problems that they face and how you can help each other.

The Risky Business of Risk Illiteracy

When does a risk not exist? What is a risk to your employer? Many people overlook the largest risks to their organization and mistakenly focus on the most interesting CVSS, Headline, Zero Day, etc. Understanding when risks can be closed out, and prioritizing which ones to tackle and mitigate first is a struggle for many teams, but why is that? Could the key to prioritization be in changing how you view risks and building a vulnerability management program around this new focus?

SecretCon 4 (2026) Sessionize Event Upcoming

June 2026 Saint Paul, Minnesota, United States

BSides312 2026 Sessionize Event

May 2026 Chicago, Illinois, United States

CypherCon 9 (2026) Sessionize Event

April 2026 Milwaukee, Wisconsin, United States

BSidesSF 2026 Sessionize Event

March 2026 San Francisco, California, United States

NDC Security 2026 Sessionize Event

March 2026 Oslo, Norway

Sean Juroviesky

Senior Security Engineer - SoundCloud

Chicago, Illinois, United States

Actions

Please note that Sessionize is not responsible for the accuracy or validity of the data provided by speakers. If you suspect this profile to be fake or spam, please let us know.

Jump to top