Adam Schaal Email & Phone Number

Seattle, Wa, Us

Creator and leader of the Security Hub for Innovation and Efficiency (SHINE) organization within AWS. The SHINE team researches, experiments, and develops mechanisms and constructs to reinforce security at scale. SHINE is comprised of a selection of security engineers, software development engineers, and others that are responsible for delivering efficiencies across all AWS security in three phases - prevention (secure-by-default), automation, and security control validations at scale.

Seattle, Wa, Us

Led a team of over a dozen high judgement security engineers to threat model and raise the security bar of AWS products and services. This role managed all security of the Next-Gen Developer Experience (NGDE) organization including CodeWhisperer and CodeCatalyst, all AWS Infrastructure-as-Code (IaC) including CloudFormation and Cloud Development Kit (CDK), all Amazon-produced Open Source Software (OSS), AWS DevTools, AWS CodeServices, AWS Console, AWS Mobile, AppSync, Device Farm, Simple Email Service (SES), and Pinpoint. This team created an agile security review process to handle the appetite of our NGDE organization as they continued to utilize Generative AI and Amazon's Large Language Models (LLMs). Collaborated and coordinated application security best practices with AWS VPs and Directors responsible for over 2200 software engineers. This role was also responsible for managing underperformance, training an individual contributor to a manager role, and creating the very first Department of Labor application security apprenticeship program. Our apprenticeship program had an 80% success rate and even garnered attention from the White House.

Omaha, Nebraska, Us

Omaha, Nebraska, Us

Help guide Kernelcon to be an annual destination for security professionals around the world that want to have a unique conference experience.

Omaha, Nebraska, Us

As Training Chair, I am responsible for selecting and coordinating the training sessions for Kernelcon 2023.

Omaha, Nebraska, Us

As Competition Chair, I create and oversee the CTF and any other competitions for Kernelcon 2020 and 2022. In addition to my responsibilities as Competition Chair, I also created each yearly website for Kernelcon.

Omaha, Nebraska, Us

I was the General Chair for the inaugural Kernelcon Conference of 2019. Helped guide our conference to an amazing first year success, with over 340 attendees and a year one profit. Oversaw multiple villages, workshops, and competitions in addition to two days with two tracks each of speakers. Along with my responsibilities as General Chair, I also created the website for Kernelcon 2019.

Public Speaker for Security Conferences:Oct 2024 - NoHat Security Conference - Bergamo, Italy (Accepted)July 2024 - LocoMocoSec - Kauai, HIAug 2023 - Chaos Communication Club - Berlin, GermanyOct 2022 - LASCON - Austin, TXNov 2021 - The Linux Foundation Member Summit - Napa Valley, CAOct 2021 - LASCON - Austin, TXAug 2021 - Blue Team Con - Chicago, ILJuly 2021 - DEF CON 29 - AppSec Village - Las Vegas, NVDec 2020 - Midwinter's Night's Con - VirtualJuly 2020 - Bsides San Antonio - San Antonio, TXJun 2020 - Circle City Con - Indianapolis, INApr 2020 - Bsides Chattanooga - Chattanooga, TNMar 2020 - OWASP SnowFroc - Denver, CO

Pleasanton, California, Us

Added duties and direct reports to the below role as the new Director of Enterprise Security. Additional responsibilities encompass managing the strategic direction, project execution, and operational delivery of security services to the enterprise, including: Vulnerability Management, Incident Response, Internal Red Teaming, Alert/Anomaly detection, and more.

Pleasanton, California, Us

Promoted to Director of Product Security leading a team of high-performing global cloud and application security engineers. Hyper-focused on continuous security enhancements in all aspects of the SDLC for a wide range of products. Responsible for security initiatives such as defining security requirements and policies, reviewing testing and deployment standards, cloud security, managing secure code analysis techniques, bug bounty program, secrets management, and asset and vulnerability management. Partner with cross-functional teams to drive security initiatives and provide application security training. Provided metrics, reports, and key performance indicators to CISO and executive staff. Passionate about the opportunity to foster a culture of respect and inclusivity while maintaining a fun environment and promoting individual work-life balance. Continually working to establish healthy team relationships through 1:1 engagements and coaching.

Pleasanton, California, Us

In depth work on re-tooling instrumentation rules and creating centralized repos across all agents. Responsible for creating proof-of-concepts containers, discovering bypasses in our own software, and working with engineers to resolve gaps or misses. Team also responsible for incident response, product security, triage support, research and product innovation. Additionally, managed a private Bug Bounty program.

Englewood, Colorado, Us

I led Vulnerability Management Meetings responsible for over 900 developers. I also led Community of Practice for Secure Development meetings where I setup a lab environment for developers to learn and practice exploits against real-world applications. Founded and am responsible for a quarterly Hack the App contest in which teams compete in a CTF-style environment for prizes.One of my primary duties at CSG was creating automation tools for vulnerability discovery. I accomplish this by automating three things using python: new vulnerability importing, asset inventory compilation, and automating the matching/identifying between the two. Most of my code/methods can be utilized in any environment.I was the Technical lead for automating tools amongst my teams processes via scripting/coding. Also, I worked closely with my team scanning code for Third-party and Open Source software vulnerabilities found within several hundred applications. Responsible for static and dynamic code analysis as well. Duties include internal penetration testing.

Dallas, Tx, Us

I worked in ReactJS helping to convert a suite of sites to new forward-facing platforms. I worked heavily with ES2015 and ES2016 conventions and have used flux and mob-x libraries.

Washington, D.C., Us

I am a UI/UX designer and developer. I work with Java, XSL, CSS, HTML, JavaScript, JQuery, and Ember. I have experienced upgrading sites to be 508 compliant (http://www.ada.gov/508/) and helping to create new features and content managers.

Omaha, Ne, Us

I thoroughly enjoyed working for Shaffer & Stevens. It was a small firm which gave me a variety of experience, from concrete and steel design to wood and masonry design.I'll never forget Jeff and Don for giving me my first professional job.

Master Of Science (Ms), Computer And Information Systems Security/Information Assurance

Master Of Science (Ms), Architectural Engineering

Bachelor Of Science (Bs), Architectural Engineering