OWASP Triangle presents: Steve Myrick "You're Already Threat Modeling"

​Speaker:
Steve Myrick - Senior Manager, Product Security @ Marqeta

With the volume of code and risks to businesses increasing with the growth of agentic development, threat modeling has never been more important than it is in 2026. In this talk, we’ll explore how the core principles of threat modeling - identifying assets, understanding threats, evaluating risks, and implementing mitigations
- translate seamlessly between securing systems and making everyday risk-informed decisions.

Attendees will learn to recognize the threat modeling they already practice in daily life and understand how formalizing these instincts creates more robust security strategies for applications and systems. We’ll cover a practical framework for explaining security decisions to both technical and non-technical stakeholders, as well as show how you can use open source tools to start threat modeling today.

Steve bio:
I’m a hacker who leads other hackers to be the best version of themselves.

Finding vulnerabilities is fun, but my true passion is crafting a security culture that my team members (and the engineers they serve) love.

I'm also passionate about the security community, specifically conferences where I design/host CTFs and occasionally speak.

Some past talks I've given:
We Are The (Security) Champions - BSides RDU 2021
Building a Free AppSec Pipeline - CackalackyCon 2023
The LLM's Love Language: Protecting Your Systems from Promiscuous Prompts - BSides RDU 2023
Da Bomb: Beyond Insanity - Automating Red Teaming using Atomics - CackalackyCon 2024 & SummerCon 2024