I work at the intersection of cyber defense, AI safety, and emerging risk, where the threats are converging and the playbooks are still being written.

My career has taken me from the Marine Corps to NSA, U.S. Cyber Command, the U.S. House of Representatives, Mandiant, and Netflix. Across every role, one throughline: understanding adversaries, building high-trust teams, and translating complex problems into strategies leaders can act on.

Today, I advise organizations, governments, and research institutions on AI governance, agentic threat preparedness, and unifying safety and security into a single discipline. I contribute to global standards efforts including the EU AI Act (via OWASP AI) and lead executive education on cybersecurity and AI strategy at SANS.

If you’re navigating the future of AI risk or security strategy, let’s connect.

Chris Cochran

This room was electric.

Just wrapped my Agentic Identity talk / BoF at [un]prompted, and honestly, having some of the best minds in AI security in one room was a highlight of the conference. We didn’t keep it high-level, we went deep into the architecture of the future.

Several of the folks in the room did research that started my own journey, or are actively tackling this same challenge:
Ken Adler, John Yeoh, Toby Kohlenberg He/Him, Charles Nwatu, Rob T. Lee, and Olivia Gallucci, just to name a few.

The conversation pushed into some big questions:

• The Agent Era: What does identity look like when the “user” isn’t human but can sometimesact like one?
• Authorization: How do we solve who can do what in a generative world?
• The Infrastructure Question: Centralized platforms, blockchain experiments, or an inevitable hybrid?

The questions from the room were next-level.

Huge thanks to Gadi Evron, Sounil Yu, and the entire [un]prompted team for creating space for these conversations.

I’ll share a deeper recap (and a few emerging answers) soon.

Field CISO & VP, AI Security @ SANS | Bridging Cyber Defense and Frontier AI Risk | Ex-NSA, Netflix, Mandiant | US Marine Veteran

No alternative text description for this image

Programs like this can change a career forever.

Honored to be a small part of this amazing program.

https://lnkd.in/ghuY7wiG

Women in CyberSecurity (WiCyS) SANS Institute Foster Nethercott Mari DeGrazia Maxwell Shuftan Tyler Corcoran Kajal Shelat

Open article: Women in CyberSecurity (WiCyS) Launches AI Security Accelerator Program for Maryland Members by finance.yahoo.com

Women in CyberSecurity (WiCyS) Launches AI Security Accelerator Program for Maryland Members

Excited to be in San Francisco for the first-ever [un]prompted Conference.

It’s encouraging to see a room full of practitioners leaning into the evolving discipline of AI security, particularly around agentic systems, identity, and workforce readiness. Not long ago, this wasn’t even a defined field. That’s wild.

If you’re here and interested in thoughtful conversations about securing what’s next, including what we’re seeing globally and how the SANS Institute is supporting the community, I’d welcome the exchange.

Strong work by Gadi Evron, Sounil Yu, and the team bringing this together.

A few years ago, I was done with security. Burned out. Two decades of the same circuit, same panels, same predictions. The people closest to me knew it.

Then AI pulled me back from the dead.

I just spent a week at [un]prompted in San Francisco, and I walked away changed. Not inspired in the vague, conference-high, shallow influencer, kind of way- changed in the "I was wrong about seven things and I'm all in" kind of way.

Wrong about the sidelines. Wrong about the hype. Wrong about whether anyone else saw what was coming.

In my latest article, I break down all seven, plus standout work from folks like Nicholas Carlini at Anthropic, Heather Adkins and John "Four" Flynn at Google, Olivia Gallucci at Datadog, and Scott Behrens and Justice Cassel from Netflix security team, all building the future of AI security in real time.

I even had a bit of a surprise guest spot.

This is our Industrial Revolution, folks. And the rules are still being written.

Check out the seven things I was wrong about below.

Gadi Evron Sounil Yu Ida Vass

I'm a student of history, business, and technology. Always have been. For years, I looked back at the Industrial Revolution, at the dawn of the intern

Open article: 7 Things I Was Proven Wrong About AI Security at the [un]prompted Conference by Chris Cochran • 7 min read

7 Things I Was Proven Wrong About AI Security at the [un]prompted Conference

I’m honored to join Pentera’s AI Security Exposure Survey 2026 Webinar alongside Ryan Dorey, Director of Technical Advisors at Pentera, where we’ll unpack the real deal from the benchmark data revealing how organizations are navigating the security challenges of rapid AI adoption. 

What we’re seeing in the data is pretty straightforward, but some insights will surprise you:

Legacy controls are being stretched to cover AI-driven workflows.
Teams are being asked to secure systems they didn’t design and may not fully understand.
And in many cases, organizations don’t have a clear way to validate AI risk before an attacker does it for them.

In this session, we’re going to have a very practical conversation about that.

We’ll cover:

• How the benchmark was built and what 300 CISOs are actually saying
• Real examples of how AI security gaps become exploitable exposure
• Where adversarial testing fits in, across data, identity, and infrastructure

It’s about closing the gap between AI adoption and real-world security validation.

Join us by registering with the link in the comments.

No industry faces the complexity of AI adoption quite like healthcare. Getting it wrong is measured in revenue but more importantly, it’s measured in outcomes, in trust, and in lives.

That’s what makes the conversations happening right now so critical.

What gave me genuine optimism was seeing security teams and IT leaders speaking with one voice, not just asking “How do we protect the organization from AI threats?” but going further. 

Acknowledging that AI carries extraordinary promise and meaningful risk, and that moving forward demands intentionality above all else.
The next 12–18 months will be defining. 

Organizations that build governance frameworks, align stakeholders, and treat security as a design principle will earn lasting trust. Those that move recklessly won’t get a second chance.

I’m encouraged by an industry leaning in with both urgency and discipline. That balance is rare. It’s also exactly what this moment requires.
Thank you to SANS Institute, HIMSS, and the healthcare community for creating a space where these conversations can happen with the seriousness they deserve.

The work continues.​​​​​​​​​​​​​​​​

It was great to see the masterful Chris Wilkes work his magic in another Crisis Exercise. Amanda Burdey, GISF, GSTRT and I got to do a bit of acting in support. 

It was also a pleasant surprise to see Maria Graham. I still am and will always be jealous of your friend group. So cool to see.

#HIMSS26

Want to see how AI can automate absolutely everything in the SOC?

Then this is not the talk for you.

On March 18th, I’m joining my dear friend Nathan Burke from 7AI for a SANS Institute webcast “Don’t Trust AI – Verify It: A Practical Discussion About AI in the SOC”  and we’re not here to sugarcoat anything.

We’ll be getting into:
• Why agentic AI systems are introducing risks most orgs aren’t ready for
• What “verify, don’t trust” actually looks like in practice inside the SOC

If you’re leading security strategy in an AI-first world, this conversation is one to check out. 

No fluff, no vendor pitches just two crazy tech guys with slightly too much energy, who care deeply about getting this right. 

Get your spot in the comments below.

If you know Kate Marshall, you know she is someone who legitimately wants to give value to everyone in her atmosphere. 

This book is pure value for those looking to bring AI into their personal or professional lives.

I’m proud of Kate, not only for this masterclass of a book, but for stepping into to the arena and arriving like a force to be reckoned with.

Grab your copy here: https://a.co/d/02rpuPWV

Great to be back with our special operations community this week at SOFWERX for C2DS. We focused on the intersection of agentic security and prompt engineering, specifically how these technologies can be weaponized as tactical force multipliers for the mission.

As the threat evolves, ensuring our elite operators have a competitive edge is paramount. It was a privilege to contribute to the mission and spend time with the professionals dedicated to keeping this country safe.

Thanks for making this week awesome Kerry Rock, Luke Leviner, and Foster Nethercott. 

Semper Fi.

Last week I sat down with 300 CISOs worth of data and one question kept echoing in my head: How is it possible that 100% of enterprises have adopted AI, and zero percent have full visibility into it?

I hosted a live session last week with Ryan Dorey from Pentera, digging into their AI Security & Exposure Benchmark 2026. What came out of it was one of the most honest, unfiltered conversations I've had about where enterprise AI security actually stands right now.

A few things that stopped me cold:

→ Only 11% have purpose-built AI security tooling, the rest are stretching legacy controls to cover attack surfaces they were never designed for
→ 50% of CISOs cite lack of internal expertise as their # 1 barrier, not budget
→ Shadow AI isn't some edge case. It's the default condition in most enterprises right now

And the one that always keeps me up at night: we are in the calm before the storm.

Autonomous agents that don't sleep. Attack paths that are 80-90% automated. An 11-year-old with access to a sophisticated offensive agent isn't science fiction, my friends.

I wrote up a bit from the session, the data, the real-world attack scenario we walked through, and what I'd tell every security leader to focus on today.

Link to the full article. 👇

What's the biggest AI security challenge you're navigating right now? I'd genuinely love to hear it.

Last week I had the privilege of joining Ryan Dorey from Pentera to dig into their freshly released AI Security & Exposure Benchmark 2026 - a survey o

Open article: The 100/0 Problem: Every Enterprise Has AI. None Have Full Visibility Into It. by Chris Cochran • 6 min read

The 100/0 Problem: Every Enterprise Has AI. None Have Full Visibility Into It.

I was fortunate enough to contribute to this CSO Online piece on how CISOs are rethinking data protection in the AI era.

The core challenge I keep coming back to: AI-driven data exposure doesn't look or feel like exfiltration. Employees paste source code and customer data into consumer models, thinking they're being productive,  not realizing the risk. Add expanding data sovereignty rules, AI-specific regulatory guidance, and post-quantum encryption on the horizon, and you understand why this has become a board-level conversation.

Shoutout to the other security leaders and practitioners featured in the article by Mary K. Pratt, lots of practical thinking in here worth your time.

Link in the comments.

It was an honor to hang out with my buddy Christopher Luft to chat all things AI in security.

Thanks LimaCharlie and SANS Institute for facilitating the conversation.

AI skill gaps are a real conversation right now, and Chris Cochran, Field CISO and VP of AI Security at SANS Institute, breaks it down into three practical buckets for defenders who want to stay ahead.

Start by figuring out what you can offload to AI: summarization, enrichment, repetitive tasks. Save the deterministic decisions for humans.

Then learn how to secure AI itself:

> Agent-to-agent communications
> MCP server security
> OWASP Top 10 for agents

Finally, understand governance. Not just the technical side, but what your company is actually trying to do with AI. Security practitioners who can enable the business, not just protect it, become irreplaceable.

Listen to the full episode: https://lc.pub/4s7iL4V

#cybersecurity #ai #podcast

I’m incredibly proud of the work we’ve put into the latest OWASP AIVSS Project update. Still pinching myself about being involved with some of the most respected leaders in our industry.

OWASP AIVSS Project 
OWASP AI Exchange 
SANS Institute

The AI Exchange is proud to co-publish this magnificent OWASP AIVSS Project update. Credits to all experts and for the OWASP AI Exchange: Behnaz Karimi, Chris Cochran, Miracle Owolabi, with supporting: Alex Leung and Srajan Gupta.

#ai #aisecurity

Platform9

Sales Business Development

Revelstoke Security

-Exceeded Q2 (154%) & Q3 (143%) quota
-Individually Sourced 23.4% Sales Revenue (Outbound)
-Lead and helped developed onboarding & training program for the SDR team
-Negotiated and optimized sales team tech stack (Outreach, Gong, and ZoomInfo)

SDR Manager

Sounding Board, Inc

I successfully built out an SDR function from the ground up, that helped generate $25M+ in opportunity pipeline and $5M+ in Closed Won ARR

• Built out SDR Comp Plans that Successfully Aligned with Sales Team & Company Business Needs

Aptos Solar Technology

Headquartered in the heart of Silicon Valley, we meet inspiration and innovation every day. Our team passionately creates advanced solar technologies that push the boundaries when it comes to performance, aesthetics, and costs. We are committed to providing our customers with cutting edge technology and quality at a competitive price.

Account Executive

Treasure Data

Senior Business Development Manager

Versa Networks

Versa is unique among software-defined networking vendors, providing an end-to-end solution that both simplifies and secures the WAN/branch office network. Based completely on software, Versa’s Cloud IP Platform delivers a broad set of capabilities for building agile and secure enterprise networks, as well as highly efficient managed service offerings.  Versa removes the complexity out of networking and security infrastructure.

Viptela

Viptela provides Software-Defined Wide Area Network (SD-WAN) technology that allows global companies to build carrier agnostic, policy-controlled and cost-effective WANs. Viptela has been deployed at thousands of sites by more than 15 Fortune-500 enterprises; and major carriers including Verizon and Singtel deliver managed SD-WAN services using Viptela. The company has been named a Gartner Cool Vendor and a Next Billion Dollar Startup by Forbes in 2015. Viptela is backed by Sequoia Capital and headquartered in San Jose, CA. Follow us on Twitter @viptela.

Senior SDR Manager

VeloCloud, Now part of VMware

VeloCloud is a pioneer in Cloud-Delivered WAN. VeloCloud dramatically simplifies the WAN by delivering virtualized services from the cloud to branch offices and mobile users everywhere. VeloCloud services deliver enterprise grade performance, visibility and control over both Internet and private networks, combining the economy of the Internet with the flexibility of the cloud. 

VeloCloud’s culture is focused on learning fast in an environment built on trust. We encourage diversity in thought and action and celebrate the myriad of hobbies and interests that our employees pursue. We are looking for passionate people to join our team. Come Learn with Us™. 

Visit www.velocloud.com and follow on Twitter @VeloCloud

Talari (Acquired by Oracle)

Business Development Rep for Talari Networks #1 revenue growth and earnings team. Strategic and resourceful innate ability to establish and foster key partnerships both with internal and external customers in order to maximize customer satisfaction as well as bottom line growth.

- Talari Networks #1 Revenue Producing Business Rep.
- Build the pipeline for the Regional Sales Managers
- Initiating new sales opportunities by generating qualified appointments for the Regional Sales Teams
- Managed & nurtured accounts through the sales process and have helped to grow my regions and sales teams to be part of Talari Networks "Best" revenue producing quarter to date.

BDR Manager

Talari WAN Virtualization solutions bring Internet economics to corporate WANs by transforming broadband
and other affordable Internet links to deliver business-class reliability and performance predictability at
consumer prices.

As a Business Development Specialist, I conduct research on potential clients and reach out to firms, setting up meetings for the Territory Manager(s) to help drive the bottom-line & build the pipeline for Talari.

Team Lead, Inside Sales Rep – West & Central USA at Talari Networks

LinkedIn

LinkedIn is the World's largest professional networking site with over 80 million professionals and growing at a pace of 3 million new members per month.

People join LinkedIn to build their personal brand and we empower our members with a multitude of free and premium tools all designed to boost their careers and expand their opportunities. 

- Qualify and develop inbound sales leads and respond to product inquiries.

- Drive attendance for marketing campaigns and events for Fortune 100 and 500 companies.

- Cold calling prospects regarding our LinkedIn Corporate Solution recruiting and marketing products.

- Work with upper level managers and directors to design region specific outbound sales campaigns.

- Schedule demonstrations between Sales Representatives and potential customers.

Senior Sales Development Specialist

Accomplished and integrity-driven professional offering over 20+ years of business success with a proven track record of success in sales, customer service, developing and strengthening partner relationships, and project management for Fortune 1000 companies worldwide. Recognized as a team leader with strengths lying in my ability to form strong relationships, credibility, and loyalty with customers through superior professionalism, excellent communication skills, and integrity.

Account Management, Inside Sales, Lead Gen and Marketing experience at emerging high tech companies.

Account representative for US territories, working with the Regional Sales Manager to develop leads & close deals.

Specialties: * Significant success in penetrating new markets and territories 
* Ability to effectively manage the complete sales cycle process from education to closing 
* Self starter and results driven sales professional with a proven record of success 
* Strong team player and proven ability to communicate effectively with diverse personalities 
* Strong customer service and exceptional personal relationship building skills

Chuong 🐅  Pham 🚀

I’m happy to share that I’ve started a new position at Flywl as a Cloud Marketplace Advisor. 

I am super grateful for this opportunity and be part of “The Movement” and reunited with Tanya Q.. Great leadership led by CEO Ankur Srivastava & Jeff Somers!

Flywl makes cloud marketplace procurement fast, simple, and secure. It's the only place to buy and sell enterprise software across AWS, Azure, and Google Cloud on one unified platform that turns commitments into savings.

It's marketplace intelligence, made simple.

Chuong Pham

Flywl makes cloud software purchases fast, intuitive, and built for buyers—finally catching procurement up to the speed of the cloud.

taplio

The Battle

Chris Cochran

Chuong 🐅 Pham 🚀

Followers

Posts

Engagements

Likes

Performance ScoreChris Cochran's LinkedIn Performance

Performance ScoreChuong 🐅 Pham 🚀's LinkedIn Performance

Ready to grow your LinkedIn presence?

taplio

The Battle

Chris Cochran

Chuong 🐅 Pham 🚀

Followers

Posts

Engagements

Likes

Performance Score.css-goub6s{font-size:var(--chakra-fontSizes-md);font-weight:500;color:var(--chakra-colors-gray-600);display:block;margin-top:var(--chakra-space-1);}Chris Cochran's LinkedIn Performance

Performance ScoreChuong 🐅 Pham 🚀's LinkedIn Performance

Ready to grow your LinkedIn presence?

Performance ScoreChris Cochran's LinkedIn Performance