Chris Weber

About Chris Weber

I co-founded Casaba Security where we find bugs and vulnerabilities in code used by millions of people. It\'s what gets me up in the morning.For over two decades we\'ve been testing the security of AI systems, cloud platforms, and applications for some of the world\'s largest and most advanced technology companies. They show us their most sensitive code and their hardest problems. We show them what\'s vulnerable and exploitable and how to fix it. That trust is everything - it\'s the reason we\'re still here.Today I\'m focused on leading our AI security practice, building Nemesis - our security operations platform that supports our consultants to go faster and deeper - and growing a team of 60+ people who are curious, technical, and relentless. Since 2024, Microsoft has chosen us to test M365 Copilot each year. Those reports are public and I\'m proud of the work.I handle hiring, client relationships, R&D, and mentoring our testing teams. I still get hands-on when I can. Old habits from years of code review, pen testing, and chasing vulnerabilities down rabbit holes.Before Casaba I was at Foundstone. I\'ve spoken at Black Hat, CanSecWest, and Microsoft BlueHat. I co-authored a couple of books on security and have been a Microsoft MVP in Developer Security multiple times.If you\'re building with AI, running on the cloud, or shipping software that matters - I\'d love to hear about it.

Experience

1. Advisory Board Member

   Numurus, Inc

   Jun 2017 — Present · Seattle, WA, US

   Numurus is building industrial automation technology combining robotics and artificial intelligence. I serve as the advisory board member for cybersecurity.

Education

• University of North Carolina Wilmington

  BS, Information Systems and Marketing

  1993 — 1996

Skills

• Vulnerability Management
• Management
• Information Security
• Data Security
• Security
• Enterprise Software
• Strategy
• Computer Security
• Software Development Life Cycle (Sdlc)
• Business Process
• Program Management
• Unicode
• Business Development
• Internet Security
• Security Research
• Software Engineering
• Networking
• Sdlc
• Vulnerability Research
• Cloud Computing
• Software Development
• Penetration Testing
• Owasp
• Network Security
• Iot
• Security Audits
• Security Development Lifecycle
• Information Security Management
• Web Application Security
• Pci Dss
• Cloud Security
• Vulnerability Assessment
• Application Security
• Business Strategy
• Privacy Law
• Security Architecture Design
• Photography