BSidesPDX CFP Review Board

Michael Leibowitz (@r00tkillah) has done hard-time in real-time. An old-school computer engineer by education, he spends his days hacking the mothership for a fortune 100 company. Previously, he developed and tested embedded hardware and software, fooled around with strap-on boot roms, mobile apps, officesuites, and written some secure software. On nights and weekends he hacks on electronics, writes CFPs, and contributes to the NSA Playset. He is the chairman of our CFP this year.

Thaís "barbie" Moreira Hamasaki is a former ballerina, physics researcher, and reverse engineer who traded particle accelerators for CPUs and offensive security research. She spends an unusual amount of time exploring microarchitectural performance features, security implications, and the more than occasional slide decks. Previously, she worked as a malware reverse engineer in the threat detection industry and served as lead systems engineer at the University of Hamburg while conducting research at DESY. Outside of work, barbie serves on the boards of BlackHoodie and Open Security Training, supporting security education and community building. She is passionate about advancing systems security research and helping new voices find a place in the security community.

Marion Marschalek is an independent security consultant and trainer with her consulting company Hack & Cheese. Prior to that she held senior positions at AWS and Intel, and different roles in the threat detection industry, as a malware reverse engineer and incident responder. Marschalek is a frequent speaker at major security conferences, including Black Hat, Defcon, HITB, RSA, and SyScan, among others. She used to teach reverse engineering classes at University of Applied Sciences St. Poelten, from where she graduated in 2011 with a Master's Degree in Information Security. In 2015 she started a hacker bootcamp for women titled BlackHoodie, which over the years established itself as a global initiative to attract more diverse talent to the security industry. In her spare time she enjoys long distance running.

João Moreira is a security engineer at Microsoft; he is mostly interested in low level software, such as compilers, kernels and system libraries. In the past he bashed his head against the keyboard a lot trying to get some Linux security stuff right -- some of it worked, some of it didn't, but he had a lot of fun on the way. Just like everyone else in the room, Joao is trying to digest the disruptive role of LLMs in systems security, and is currently focused on integrating these new beasts into our good ol' fuzzer workflows.

Wu-chang Feng is a professor of Computer Science at Portland State University where he helps students learn about cybersecurity topics such as generative security application engineering, web application exploitation, cloud security, reverse engineering, fuzzing, and symbolic execution.

Jay White is a cybersecurity student and SOC Student Analyst at Oregon State University, where they serve as Outreach Officer for Women in Cybersecurity @ OSU and are an active member of DAMSEC. Their primary research interests lie in penetration testing, with a particular fondness for OSINT and the reconnaissance phase. Beyond their technical work, Jay is passionate about outreach and inspiring the next generation to explore computer science and cybersecurity. In their spare time, they enjoy reading sci-fi and fantasy, procrastinating on creative writing projects, and spending time with their pets (pictured: their dog Oberon).

Helen Leigh is a hardware nerd from Wales, via London and Berlin. She is currently based in Portland, Oregon, USA, where she works as Director of Business Development for Crowd Supply, the crowdfunding and distribution platform for open source hardware. Leigh has made a wide range of hardware devices for clients and for fun, from simple musical projects for magazines to a wearable computing product with a full curriculum designed in collaboration with Imogen Heap. In her personal work, Leigh makes experimental musical instruments using textiles, metal, electronics and code.

Allison Marie Naaktgeboren is a PhD candidate at Portland State University advised by Dr. Andrew Tolmach as well as a Draper Scholar. Her research agenda is to make security tools more practical & pragmatic; she hopes to atone for all the security sins she committed over the years as a developer at Draper Labs, Signal Sciences, Mozilla, FactSet Research Systems, Amazon, and Cisco. Her current focus is improving the quality & usability of fuzzer bug reports as well as expanding fuzzer bug detection beyond memory safety to higher level classes using formal methods. She holds a Masters in Computer Science & Cybersecurity from Portland State, a Bachelor’s Degree in Computer Science from Carnegie Mellon University. She is a founder of PSU’s CTF team, the void* vikings, has volunteered with BSidesPDX since 2017, led the BSidesPDX CTF in 2024, and now serves on the CFP as well as the CTF.