International security researcher and co-founder of Trike, an open source security ecosystem
- Startup security strategy and architecture guidance
- Contributed to the Briar and Mailpile secure messaging projects
Talks at GOTO Amsterdam 2022
Eleanor Saitta leads Systems Structure Ltd, a security architecture and strategy consultancy with media, finance, healthcare, infrastructure, and software clients across the US and Europe. She's worked in security since 2003, covering everything from core security engineering and architecture work for Fortune 50 software firms to cross-domain security for news organizations and NGOs targeted by nation states.
This diversity of experience has led Saitta to combine two threads in her security guidance. The first approach looks at security outcomes for humans and organizations, with an emphasis on culture design for resilience, security-appropriate frames for thinking about exposure, and how operational changes can shift the balance of power away from adversaries. The second approach looks to modern infrastructure-as-code systems to be able support harder security guarantees, rather than statistical mitigations, and a pragmatic but principle-centric architectural approach.
Saitta was previously the security architect for Etsy.com and has worked for a number of commercial consultancies (Bishop Fox, IOACtive, and others). She is a co-founder and developer for Trike, an open source security ecosystem modeling methodology and tool which partially automates the art of security analysis, and has contributed to the Briar and Mailpile secure messaging projects. She is also a regular speaker at industry conferences; past venues include O'Reilly Velocity, KiwiCon, ToorCon, CCC, Hack in The Box, and HOPE, among others.
Check out some of Eleanor's past talks:
- GOTO Chicago 2019 - Principles for Developing More Secure Systems
- GOTO Amsterdam 2022 - What Style of Security Do You Want?