September Meetup

Join us for the September Bay Area OWASP Meetup, proudly sponsored by Sparkle security .
Spend the evening connecting with fellow security professionals, learning from insightful presentations, and engaging in meaningful discussions on the latest security topics. Enjoy great networking opportunities along with food and refreshments, generously provided by Sparkle security.
We would like to express our sincere gratitude to Workday for hosting us and providing the space.

5:00 PM : Doors open, Networking, food and drinks
5.30 PM- 5.45 :- Chapter Introductions
5.45pm to 6.30 :- From Logs to Security Signals: AI-Powered Application Logging with OCSF
6.30-7:15 PM :- Lessons from the Frontlines: Unpacking AI Security Incidents at OpenAI, and Hugging Face
7.15-8.00 PM :- Application Security with Zero Trust

Talk#1: From Logs to Security Signals: AI-Powered Application Logging with OCSF
Description: Modern applications generate enormous volumes of logs, but security teams often discover during an incident that the events they need are inconsistent, difficult to parse, or missing critical context. This talk explores a security-ready application logging architecture built around the Open Cybersecurity Schema Framework (OCSF).
We’ll examine how application events can be parsed and enriched using AI, normalized into OCSF, and automatically validated for required security context before entering the security data pipeline. Events that fail validation can be quarantined and reported back to application and logging teams, creating a continuous feedback loop that improves telemetry quality.

Attendees will learn how OCSF can standardize application security events, where AI-assisted parsing can help, how to identify telemetry gaps automatically, and how better logging enables stronger detection engineering and faster incident response.

Talk#2 Lessons from the Frontlines: Unpacking AI Security Incidents at OpenAI, and Hugging Face
Description: AI is rapidly changing the cybersecurity landscape. In this talk, we’ll examine recent insights from METR, OpenAI, and Hugging Face to understand what they reveal about increasingly capable AI agents, autonomous vulnerability discovery, and the growing advantage attackers may have over defenders.
We’ll also explore what these developments mean for AI security and the OWASP Top 10 for LLM Applications, and whether our current security practices need to evolve for an agentic AI future.
Speaker
Chandra Lingam is a security engineer at Natera and an Udemy Instructor Partner. He has published courses covering cloud security, architecture, and machine learning, and regularly explores the intersection of emerging technologies and cybersecurity.

Talk#3: Application Security with Zero Trust
Description: This talk explores the practical lessons learned while building a Zero Trust program for a cloud-connected energy system. It covers how Zero Trust principles were applied to application security, including identity, access control, APIs, and cloud services, along with the real-world challenges encountered along the way.

Speaker: Prakash Kalaiah CISO Head of Security at Energy, A seasoned cybersecurity leader with extensive experience driving global security strategies, risk management, and secure digital transformation. Passionate about building high-performing teams, fostering trusted partnerships, and sharing practical security knowledge with the community, with a strong focus on innovation, mentorship, and strengthening organizational resilience.