#28 CNL x #3 LeadDev Lisbon - Beyond the Stack: Cloud-Native Leaders, Unfiltered

Cloud Native Lisbon is back for #28, teaming up again with LeadDev Lisbon for an evening that steps outside the stack.

None of tonight's talks are really about Kubernetes or cloud architecture. They're about what happens once you're running cloud-native at scale: the vulnerability pipeline that has to hold under real load, the AI agents nobody quite knows how to govern, and the AI initiatives that shipped and still didn't move the needle.

Our three speakers lead security, innovation and technology at cloud-native, DevOps-first companies (TripAdvisor, synvert xgeeks and CloudZone), bringing the war stories, not the reference architecture.

📍 TripAdvisor offices, Lisbon
🕕 October 1, 18:30

🎤 Patrick Sukup, Director of Security @ TripAdvisor
Talk: Vuln Management at Scale: Confessions of a Pipeline

Since standing up in early 2025, one vulnerability management pipeline has tracked 3,260 Security Bug tickets across five detection sources and kept a 100% SLA, without ever being rebuilt, only repeatedly widened by small, deliberate Eng-wide decisions. This talk walks through that real decision history: what worked, what got corrected (like reclassifying 45 mislabeled criticals), and the four principles that let the same process absorb 5x the sources without needing a new one.

🎤 André Gonçalves, Head of Innovation & Growth @ synvert xgeeks
Talk: Please do not touch - Running AI agents like a museum runs a collection

A museum is an operating system for the moments that matter. AI agents will soon be as common as artworks, and just as dependent on what surrounds them. Museums quietly solved that before anyone said "agent", so this talk is a guided tour: six rooms, a few incidents, and an exit through the gift shop. It borrows their answers with slightly more confidence than the comparison deserves, and ends with the question every leader now faces: are you optimising for fewer humans, or for better human moments?

🎤 Sergio Gonzaga, CTO @ CloudZone
Talk: The Revolution Isn't the Model — It's What Broke When You Tried

Across roughly 40 AI initiatives, Sergio can name 20 that failed by a hard definition: they shipped, they technically worked, and twelve months later no business metric had moved. This session shares what separated them, and offers a simple framework for engineering leaders whose teams are now accountable for validation, compliance and business outcomes, not only for systems being well architected.

🍕 Networking, food and drinks to follow.

Organized by Cloud Native Lisbon x LeadDev Lisbon and fully sponsored by our evening sponsor TripAdvisor!

Free entry - spots are limited. Grab yours on Meetup.