Member since December 2023
I help high-growth tech organizations secure the future of innovation by designing supply chain security programs that enable speed without sacrificing safety. From open source risks to AI model threats, I turn complexity into clear, actionable roadmaps that resonate with both engineers and executives—and help detect and respond to advanced persistent threats before they become front-page breaches.
As a cybersecurity expert of over 12 years, I have managed global crises with the unique skill set she’s gained as a practitioner and instructor in Brazilian Jiu Jitsu. I’ve helped Fortune 100 companies reduce third-party risk, modernize DevSecOps practices, and align software security with business outcomes. My work spans incident response, internal security tooling, open source security, and AI safety—currently, empowering the world with changes for AI Safety and Open Source Security at Microsoft.
I'm an international Keynote speaker specialized in Cyber Security, Software Development, Open source Software, Women in Tech, Women Empowerment, Digital Portfolio Framework, Self-Defense, and Brazilian Jiu Jitsu.
Beyond my contributions to improving protective measures in cyberspace, I've founded the Lioness Instincts, a nonprofit that focuses on educating women through workshops in both self-defense and digital privacy.
I advocate and mentor women in their pursuit of cyber security careers.
Open-source software drives enterprise innovation, but unmanaged vulnerabilities create operational risks and regulatory exposure. As cyber threats evolve and compliance frameworks tighten, executives face mounting pressure to balance innovation speed with robust security governance.
Traditional approaches to OSS security often create friction between development teams and security requirements, leading to shadow IT practices and increased exposure. This session presents proven frameworks for integrating security into OSS workflows while maintaining developer productivity and meeting emerging regulatory demands like the EU Cyber Resilience Act.
In a world where cyber attacks are increasingly frequent and debilitating, it is not a matter of if but when we will become victims. In an unorthodox location of a Brazilian Jiu Jitsu academy, we can learn everything we need to become resilient to these unknown dangers and protect both our real life and our digital life.
As organizations race to adopt AI technologies, many overlook the complex -- and often vulnerable -- supply chains that power them. From open-source libraries and training data to model hosting and deployment pipelines, every layer introduces potential risk.This talk from industry thought leader Yesenia Yser will unpack the anatomy of the AI supply chain and expose the weak points most commonly exploited by threat actors, including prompt injection, model poisoning, and malicious dependencies. She’ll examine real-world examples that illustrate how these risks manifest and offer practical strategies to fortify your AI stack -- from secure development practices and component validation to continuous monitoring and governance.Whether you're an AI engineer, cybersecurity professional, or technical leader, this session will provide the insights and tools needed to secure your AI systems against emerging threats and maintain trust in open-source intelligence.
In the rapidly evolving realm of cybersecurity, professionals often find themselves at a crossroads, navigating through a complex maze of opportunities and challenges. This talk introduces the 'Digital Portfolio Framework', a strategic guide designed to empower individuals in their cybersecurity careers. This framework is not only a tool for job hunting and personal branding but also a lens through which the vast landscape of open source software communities can be explored and utilized.
Participants can expect to:
1. Learn the Digital Portfolio Framework: Gain insights into how this framework is structured and how it can be effectively applied to enhance your career trajectory. Understand the key components that make a digital portfolio robust, versatile, and reflective of your unique skills and experiences in the cybersecurity domain.
2. Explore Opportunities in Open Source Software Communities: Discover how involvement in open source projects can enrich your digital portfolio. Learn how to identify and engage with open source communities that align with your career goals and interests. We will delve into the ways these communities act as a catalyst for skill development, networking, and showcasing your capabilities to potential employers.
3. Understand the Cybersecurity Maze: The cybersecurity field is vast and often perplexing. This talk will provide a roadmap to navigate this maze, highlighting the emerging trends, skill requirements, and opportunities. We'll discuss how to stay relevant and adaptable in an industry that is constantly on the cusp of new discoveries and innovations.
This talk is aimed at professionals and enthusiasts in the cybersecurity field who are looking to strategically position themselves in an ever-changing digital landscape. Whether you are a seasoned expert or just starting out, the Digital Portfolio Framework offers valuable insights and tools to propel your career forward.
Open-source software drives enterprise innovation, but unmanaged vulnerabilities create operational risks and regulatory exposure. As cyber threats evolve and compliance frameworks tighten, executives face mounting pressure to balance innovation speed with robust security governance.
Traditional approaches to OSS security often create friction between development teams and security requirements, leading to shadow IT practices and increased exposure. This session presents proven frameworks for integrating security into OSS workflows while maintaining developer productivity and meeting emerging regulatory demands like the EU Cyber Resilience Act.
In a world where cyber attacks are increasingly frequent and debilitating, it is not a matter of if but when we will become victims. In an unorthodox location of a Brazilian Jiu Jitsu academy, we can learn everything we need to become resilient to these unknown dangers and protect both our real life and our digital life.
As organizations race to adopt AI technologies, many overlook the complex -- and often vulnerable -- supply chains that power them. From open-source libraries and training data to model hosting and deployment pipelines, every layer introduces potential risk.This talk from industry thought leader Yesenia Yser will unpack the anatomy of the AI supply chain and expose the weak points most commonly exploited by threat actors, including prompt injection, model poisoning, and malicious dependencies. She’ll examine real-world examples that illustrate how these risks manifest and offer practical strategies to fortify your AI stack -- from secure development practices and component validation to continuous monitoring and governance.Whether you're an AI engineer, cybersecurity professional, or technical leader, this session will provide the insights and tools needed to secure your AI systems against emerging threats and maintain trust in open-source intelligence.
In the rapidly evolving realm of cybersecurity, professionals often find themselves at a crossroads, navigating through a complex maze of opportunities and challenges. This talk introduces the 'Digital Portfolio Framework', a strategic guide designed to empower individuals in their cybersecurity careers. This framework is not only a tool for job hunting and personal branding but also a lens through which the vast landscape of open source software communities can be explored and utilized.
Participants can expect to:
1. Learn the Digital Portfolio Framework: Gain insights into how this framework is structured and how it can be effectively applied to enhance your career trajectory. Understand the key components that make a digital portfolio robust, versatile, and reflective of your unique skills and experiences in the cybersecurity domain.
2. Explore Opportunities in Open Source Software Communities: Discover how involvement in open source projects can enrich your digital portfolio. Learn how to identify and engage with open source communities that align with your career goals and interests. We will delve into the ways these communities act as a catalyst for skill development, networking, and showcasing your capabilities to potential employers.
3. Understand the Cybersecurity Maze: The cybersecurity field is vast and often perplexing. This talk will provide a roadmap to navigate this maze, highlighting the emerging trends, skill requirements, and opportunities. We'll discuss how to stay relevant and adaptable in an industry that is constantly on the cusp of new discoveries and innovations.
This talk is aimed at professionals and enthusiasts in the cybersecurity field who are looking to strategically position themselves in an ever-changing digital landscape. Whether you are a seasoned expert or just starting out, the Digital Portfolio Framework offers valuable insights and tools to propel your career forward.