Sec for Devs

Security isn't a solo quest — but it can feel like one. Whether you're the person your team turns to when something looks off, or you're quietly trying to build a culture where security actually sticks, you already know the weight of that. This evening is for you.
We're trying something new. Instead of talks and slides, we're gathering around a shared story — a fictional scenario designed to shift the way we think about security: from lone defender to part of something bigger. Expect collaboration, a few laughs, and the kind of conversation that only happens when the right people are in the same room.

Here's the premise you'll be stepping into:
You've been part of the Adventurer's Guild for years, taking on odd jobs for the region you live in, sometimes chasing down bad guys, sometimes escorting important cargo. But yesterday, you got a very special scroll delivered, inviting you to join a more secret part of the Guild, one only rumoured to have existed — the Unseen Hand. The mission is classified. The stakes are high. All you know is that you've been hand-picked from across the Guild, that your particular skills are exactly what's needed, and that you've been called to a secret location tonight to learn more…

About the organizers:
Tamara Buckand
Founder of Leadership Treehouse and fractional CPO with 15+ years in people and culture across Aotearoa. Tamara loves helping leaders be intentional about how they lead.
Leadership Treehouse designs immersive, story-driven experiences for leadership teams, custom built around your team's most pressing needs. You practise real skills in a space away from the day-to-day, then take the learning straight back into your work.

Anna Lezhikova
Founder of CyberFern, cybersecurity advisor, Sef for Devs host
CyberFern's philosophy is simple: cybersecurity should be practical, proportionate, and human. No jargon, no fear-mongering — just clear guidance that fits how your organisation actually works. Alongside consulting for startups and small businesses, CyberFern runs a structured Security Champions programme designed to embed security into software development teams in a way that's sustainable and doesn't burn people out.

⚠️ A note on booking:
Places are strictly limited and this event fills fast. Please only register if you're confident you can make it — every spot taken is a spot another person in the community can't have. If your plans change, please cancel as soon as you know so someone on the waitlist can join.

Please note that the entry is open till 5:30 pm (if you can't get in message to 0278544001)

Thanks to our sponsors:
CYBERFERN
Layer9 Security
.nz
Pākiki

In this session, Toby will dive into offensive WiFi security testing, covering common attack techniques, real‑world scenarios, and how attackers approach wireless environments. The talk will include practical labs and a live demonstration, giving attendees the opportunity to follow along and see techniques in action.

(Instructions will be sent out prior the event)

Toby “TheXero” Reynolds is a dynamic security professional, with over a decade of experience, His career spans a diverse clientele in both commercial and non-commercial sectors. With a keen focus on enhancing cybersecurity, his expertise lies in vulnerability research, exploit development, and blackbox Penetration Testing. As a thought leader in the field, Toby not only identifies and addresses security gaps but also takes the lead as the primary trainer in courses that delve into the intricacies of attacker tools and methodologies. By combining practical experience with a passion for education, he empowers others to navigate the ever-evolving landscape of cybersecurity with confidence.

Please note that the entry is open till 5:30 pm (if you can't get in message to 0278544001)

Thanks to our sponsors:
CYBERFERN
Layer9 Security
.nz
Pākiki

Hundreds of web application tests later, Jim is here to tell you there's no such thing as a solved problem. Having played OWASP bingo more times than he cares to count, there are a lot of reasons that applications are vulnerable and the guardrails fail. Jim will talk you through multiple critical issues discovered in the wild and how they were found, and how you too can put on your hoody and take the unhappiest path possible through a web application.

Jim is a former developer who specialises in deep dives into web application attacks as well as research into the Microsoft ecosystem. This has resulted in CVEs, disclosures to the MSRC (Microsoft Security Reporting Centre) and patched bugs in Visual Studio, MS Word and MS Outlook. He is an active and successful bug bounty hunter, who combines creative techniques from bug bounty, security research and pentesting to achieve and deliver excellent client outcomes. Jim has presented original research and vulnerabilities at several international conferences including Defcon, Off-By-One (Singapore), CHCon and OWASP. He has a strong focus on fostering a healthy security community, helping to run a monthly security focused meetup in Wellington.

Come network with like-minded developers, share experiences, and gain valuable insights.

Please note that the entry is open till 5:30 pm (if you can't get in message to 0278544001)

Thanks to our sponsors:
CYBERFERN
Layer9 Security
.nz
Pākiki