Name: NDC Security Oslo 2026
Start: 2026-03-02
End: 2026-03-05
Location: NDC Security

Currently Booking

Become a Partner

Venue

All talks from NDC Security 2025

Pictures from NDC Security 2025

NDC Conferences AS

Tickets

Partnerships

About

Code of Conduct

Privacy Policy

NDC Security Oslo 2026

Radisson Blu Scandinavia Hotel

Early Bird Tickets

60+ Sessions

55 Speakers

Workshops

The Early Bird ends 16 Jan | Security Conference for Software Developers

The Early Bird offer ends 16 January. All ticket types available. Hotel packages can be purchased for selected ticket types.

Becoming a partner at NDC Security 2025 is a great opportunity to raise your company profile and engage in the developer community.

If you don't find the answers to your questions here, contact us at info@ndcconferences.com.

All delegates, speakers, sponsors and volunteers at any NDC event are required to agree with the following code of conduct. Organizers will enforce this code throughout the event.

SecureFlag

Developer with occasional strays into security and platforms for 20+ years. Co-organiser of Cloud native Day Oslo and the Security Champions  Norge community.

Application security developer & security champion advocate

Staff Developer Advocate for Snyk, Java Champion, Oracle Ace Pro, and Software Engineer with over a decade of hands-on experience in creating and maintaining software. He is passionate about Java, (Pure) Functional Programming and Cybersecurity. Brian is a JUG leader for the Virtual JUG and the NLJUG. He also co-leads the DevSecCon community and is a community manager for Foojay. He is a regular international speaker on mostly Java-related conferences like JavaOne, Devnexus, Devoxx, Jfokus, JavaZone and many more. Besides all that, Brian is a military reserve for the Royal Netherlands Air Force and a Taekwondo Master / Teacher.

Johan Sydseter is one of the co-leaders of OWASP Cornucopia and the co-creator of the OWASP Cornucopia Mobile App Edition. he is a living AppSec Pokémon, application security engineer, developer, architect and DevOps practitioner. He has 17 years of experience building and designing backend and frontend solutions. He is also a regular contributor to Cornucopia. He has held several presentations on application security at various international conferences and currently works as an application security engineer at Admincontrol AS, a Euronext subsidiary.

Last year's bio was a massive hit, so ... I'll change it for no reason!  Let's see what this fella has to offer... Konstantinos is a guy who made the jump from the army to - let’s just say – a less stressful life. Eleven years in the Hellenic Armed Forces, with a general specialization in IT and the latest years in cybersecurity, gave him the ticket to his current occupation in Performance Technologies S.A., as a Senior Security Engineer. Offensively oriented, he deals with penetration tests and security assessments both in IT and OT environments, while simultaneously consulting them on security topics. Moreover, he loves sharing knowledge, so he also teaches cybersecurity courses in New York College. Finally, he tries to get his PhD in Cyberwarfare (not so succesfuly until now!).

Developer gone AppSec. He found security could be fun and went with it.

Nicole comes from Portugal, she started out as a Full Stack Developer, but a growing interest for cybersecurity led her to Equinor where she is part of the AppSec team.

I work as a Security Engineer by day, but my background is in software development and game programming. I’m currently especially interested in AI and security. 

I like digging into systems, finding what breaks, and figuring out how to make them better. Outside of tech, I’m a hobby game dev, a bit of a kitchen nerd, and always curious about how stuff works.

An IT consultant with 20+ years of industry experience, Tudor is a Certified Ethical Hacker and a Microsoft MVP. His commitment to staying at the forefront of technology trends, combined with his passion for sharing knowledge and engaging with the community, has made him a regular presence as a speaker at local and regional events. 

In terms of expertise, Cybersecurity Strategy, IT governance, and risk management all rank highly among Tudor’s core interests, helping companies develop effective strategies and leverage the latest technology trends in order to secure their operations. Over the course of hundreds of talks and trainings, his goal has consistently been to provide valuable insights and guidance to IT professionals and enthusiasts alike, and to support organizations navigating the ever-changing IT landscape.

Security Engineer. Sometimes I try to hack stuff. Investigated by the authorities due to an SQL injection, financed by the powers that be, someone said.

* Old man yelling at clouds & LLMs
* Graduated in mathematics
* Holistic perspective on computers: former developer, sysadmin, security officer, university teacher and even computer salesman
* Now a security consultant specializing in application security
* Open source lover

Johan Paramanathan is a security professional with deep expertise spanning advisory, technology, and architecture. Johan is a passionate and visible member of the community, frequently sharing his insights on podcasts and through his blog. As a security architect, his background provides extensive experience in key areas such as DevSecOps, enterprise architecture, and cloud security. He brings a broad range of experience across technical, operational, and large organizational initiatives, offering a unique perspective on maintaining cyber security at the intersection of business and technology.

James has been working on commercial software since the late 1990s, when TDD was something you studied but never did, pipelines were something that carried oil and Agile and Lean were words used to describe gymnasts. In 2006 he joined a startup and worked there for 9 years which included rewrites, cloud migration and Agile transformation. 

In 2015 he started life as a consultant and worked with a variety of clients trying to effect real organisational change by focusing on code quality, culture, a belief in outcomes over processes and a drive for continuous improvement. After leaving consultancy James worked as Head of Platform in a Fintech before it was acquired for $1Bn by Visa and VP of Engineering in a startup, where he learnt how to apply his knowledge of Agile and DevOps to drive positive outcomes in Platform and Cyber Security Teams.

James now works as an independent consultant and is mainly driving transformation in Cyber Security at a major UK bank.



Victor Lyuboslavsky is a software engineering leader, author, and international speaker with over 25 years of experience building products and leading teams. He has co-founded startups, held technical leadership roles at AMD, and now architects secure, scalable systems for enterprise security teams at Fleet Device Management.

His work bridges software engineering and security strategy. He specializes in open source telemetry, hardware-backed identity, and secure architectural patterns that help organizations detect threats faster and reduce reliance on black-box solutions. Drawing on lessons from startups and open source communities, he shows how transparency, clarity, and thoughtful design strengthen security without slowing teams down.

Niels Tanis has got a background in .NET development, pentesting and security consultancy. He is Microsoft MVP and has been involved in breaking, defending and building secure applications. He joined Veracode in 2015 and right now he works as a security researcher on a variant of languages and technologies related to Veracode’s Binary Static Analysis service. He is married, father of two and lives in a small village just outside Amersfoort, The Netherlands.

I am a Senior Security Engineer at O3 Cyber with years of experience with hyperscalers as both an architect and a hands-on technical lead, specializing in designing and implementing security solutions for cloud-native environments.

Karim is a seasoned and renowned thought leader within cloud security. At O3 Cyber, he conducts research and development and works with our clients, primarily in Financial Industry. Karim has a background in building and operating platform services for security on private and public clouds, developing and executing a cyber security strategy for the world’s largest sovereign wealth fund, and overseeing the execution of adapting a traditional security organization to a ‘cloud operating model.’

Karim blogs at https://blog.karims.cloud

You know what’s truly rewarding? Helping someone learn and grow. There’s nothing quite like being part of someone’s journey and knowing you played a role in their progress. As a human being, a mother, a team member, and Head of Design, my mission is to contribute to as many growth stories as possible. Over the past 18+ years, I’ve gained a wealth of experience in design, product, and leadership - and now, it’s time to give back.


Working at Sopra Steria Norway as a Senior Engineer and Lead for Cloud Native Competency group. 

My experience and expertise covers both technical and non-technical roles and competencies. In terms of technology, working with containerized applications, Kubernetes platforms and whatever is bleeding edge and complex. Working to help people achieve a way of work, strategy and mentality which is DevOps centric. I love sharing my experiences, learning new things and apply what I know.

Principal Cloud Native architect and developer with a passion for integration and automation. But wait, it's more! Passion does not only have to be in tech! There is also a burning passion for neurodiversity and diversity in tech, across ages, genders, identities, etc... 

Loves integration, automation and making processes more streamlined. A back-end developer for over 20 years. Have worked with building integration platforms in the cloud for several bigger organizations.  Worked with .Net since early 2000, and Azure since launch. 

Have also been a team lead, worked with process streamlining, enterprise architecture and everything between that and made my hands dirty as a developer and cloud native architect.

Tech Enthusiast, Cloud Advocate, Speaker

Simona is a Sr. Solution Engineer in Global Black Belt team at Microsoft, with 10+ years of experience in the tech industry focusing on cloud and software development. She is working with customers to harness the power of GitHub, AI and Azure to boost productivity,  improve SDLC, and deliver secure products faster. With a passion for cloud and DevSecOps, Simona is an active member of tech communities, driving innovation and making tech work smarter, not harder.

Hi, I’m Truls. I’m a security engineer with a passion for, well, automation and security. I’m a Microsoft MVP in Security for the “SIEM & XDR” category. My experience includes system administration, development/automation engineering and penetration testing.

I like to speak and write to give insights on various topics related to security and automation, where I cover a wide range of subjects from cloud security strategies and log ingestion techniques, to hands-on demonstrations for security operations in topics like SIEM best practice, SOAR, detection engineering and a lot more stuff that I find interesting.  Outside work I spend most of my time on either Inferno or the Rift!

Michael's career at Microsoft spans over 30 years, working exclusively in Security and is currently in the Microsoft Red Team. He is the co-architect of the Microsoft Security Development Lifecycle. His latest book is Designing and Developing Secure Azure Solutions, and he is a co-host of the Azure Security Podcast. 

Anders Abel is a senior .NET developer in Stockholm. He has been programming since he was 9 and still thinks it’s tremendously fun. When asked what he does for a living he often responds "building login buttons". Anders has extensive experience on Single Sign On and API security. His Saml2 library is trusted by millions of users world wide and he has deep expertise on OAuth and OpenID Connect from his work on Duende IdentityServer.

Niall is an Irish guy who managed to end up in Norway after finding out the country existed when he was in New Zealand. He works at Microsoft helping customers with their technology investments. He has very strong opinions on security, web tech, food and wine. 

Inge Halvorsen is a historian, philosopher, teacher, and developer. With a genuine interest in quirky and esoteric knowledge, and a penchant for diving into rabbit holes, Inge is a fountain of footnotes and fun facts. He also writes code and enjoys reading fantasy books.

Cyber Security Consultant obsessed with the idea of ​​playing detective in front of a pc, catching bad (cyber) guys and saving  (business) damsels in distress.

Active player for various community projects, he recently started hosting a CyberSecurity Podcast called SECURITYbreak

Sean Juroviesky is a dedicated security and risk management expert with extensive experience navigating complex environments. Sean excels at developing a comprehensive understanding of intricate systems and crafting strategic roadmaps to revitalize security programs. By identifying high-risk areas and optimizing the use of existing resources, Sean removes barriers between teams to enhance communication and coordination, driving effective security outcomes. Beyond their professional pursuits, Sean finds joy in backpacking through the mountains with their adventurous Australian Shepherd, partner and twins, embracing the serenity of nature and the thrill of exploration.

Sofia works as a security specialist at Binary Security. She started her career with a PhD in pure maths, followed by three years at Cisco developing one of their networking OSs. She eventually made her way into security testing, which she has been doing for three years. 

Ignat is a systems engineer at Cloudflare working mostly on Linux, platforms and hardware security. Ignat’s interests are cryptography, hacking, and low-level programming. Before Cloudflare, Ignat worked as a senior security engineer for Samsung Electronics’ Mobile Communications Division. His solutions may be found in many older Samsung smart phones and tablets. Ignat started his career as a security researcher in the Ukrainian government’s communications services.

Roberto Rodriquez is a Principal Security AI Researcher at Microsoft, where he focuses on exploring and developing solutions that leverage autonomous agents to defend and protect the organization. He is the founder of the Open Threat Research (OTR) community, which fosters collaboration and shares innovative research projects with the broader security community. Roberto is also the author of several influential open-source projects, including the Threat Hunter Playbook, Security Datasets, OSSEM, SimuLand, and ATT&CK Python Client. To follow his latest work and contributions, visit https://blog.openthreatresearch.com/ and https://github.com/OTRF

Niek is a Principal Engineer in the Philips Software Center of Excellence. He supports businesses in the goal of building better software and engineering practices. Niek is closely involved in shaping the future of software within Philips by driving DevOps culture transformation. He is playing a key role in driving the InnerSource community in Philips to build faster, better software together. As public speaker, blogger, open source maintainer and book reviewer, he advocates and shares his expertise on key areas as Cloud, DevOps and Software Development. 

Daniel Sandberg is a Senior Software Architect with 20 years of experience designing scalable, high-performance systems. He combines deep architectural expertise with a strong focus on building reliable and secure solutions that meet modern business needs.

Tobias Ahnoff is an experienced developer and architect with focus on application security. He specializes in implementing authentication flows and authorization for web applications and APIs that manage sensitive data in the bank, finance, and health sectors. He performs security reviews and penetration tests as part of Omegapoint Cybersecurity, contributes to the OWASP ASVS working group and is a co-author of http://securityblog.omegapoint.se/

Eivind is a developer and an application security expert. At Omegapoint Norge he works as Head of Cybersecurity and helps customers with their security concerns. He has extensive experience in crafting secure applications, and reviewing applications for security.

Charlie Eriksen is a Security Researcher at Aikido Security, specializing in software supply-chain security. He focuses on detecting malicious code in open-source packages and on improving the ecosystem's resilience against emerging threats. Previously, he worked in consulting, offensive security, and bug bounties, co-founded a training company focused on the OWASP Top 10, and founded a company focused on JavaScript static analysis.

Daniel Stenberg is a Swedish Internet protocol expert and developer who has participated in and worked with Open Source for thirty years. Perhaps most known for being the founder and lead developer of the curl project, one of the world's most widely used software components. He participates in protocol development within the IETF and has authored books on curl, Open Source, HTTP/2, HTTP/3 and is a frequent public speaker. Daniel is the president of the European Open Source Academy and a two times gold medal receiver for his Open Source work. Employed by wolfSSL.

Tjerand is a cryptography researcher focusing on quantum-safe cryptography, privacy-preserving technologies, and secure implementation.

Daan Keuper is the head of security research at Defion Security. This division is responsible for advanced security research on commonly used systems and environments.

Daan participated four times in the internationally known Pwn2Own competition by demonstrating zero-day attacks against the iPhone, Zoom and multiple ICS applications. In addition Daan did research on internet connected cars, in which several vulnerabilities were found in cars from the Volkswagen Group.

Police officer turned computer forensic investigator, turned analyst/developer. Sindre started his career as a street cop that quickly switched to computer forensics/mobile forensics with key focus on online child abuse.
From 2018 he worked at the Norwegian "National Criminal Investigation Service", more commonly known as Kripos.
At Kripos he worked with analyzing data that the commercial forensic toolkits did not parse/present, most actively in the investigations of the ransomware attack against Norsk Hydro in 2019. Currently working as a Solutions architect at Graphistry.

Manfred is a visualization engineer at Graphistry with a deep background in graph visualization rendering and experience in visualization design. Previously he was one of the core maintainers of CytoscapeJS - a leading graph visualization library, and of Grafer - a high performance GL visualization library. He co-authored the “Best Paper” at the IEEE VIS 2021 conference for graph approaches to large-scale biomedical knowledge exploration.

Francine Solheim is a cybersecurity architect specialising in defensive architecture and weird tooling. She has worked on SOC augmentation, ISO 27001-driven security programmes and experimental monitoring tools, and is currently focused on piecing together enterprise-grade-but-still-open-source SIEM/SOAR solutions and making advanced attacker techniques understandable and reproducible for 'normal' engineering teams.

Filip is a dual Microsoft MVP, author of the academic textbook "Introduction to Quantum Computing with Q# and QDK” and an open source contributor. He specializes in cloud technologies and quantum computing. Filip is based in Zürich where he works in the medical industry as a Cloud Architect.

Bodhisattva Das is a Security Engineer at Rudra Cybersecurity, focused on securing non-human identities, AI agents, and automated workloads across cloud environments. He specialises in open-source threat detection using Wazuh, and builds practical solutions for identity governance and AI-driven security operations. Driven by a passion for digital rights and responsible AI governance, he strives to build secure systems that protect people as technology evolves. Outside of work, he enjoys traveling and exchanging ideas with global tech communities.

Chris Ayers is a Senior Software Engineer at Microsoft, where he builds AI-driven tooling to analyze outages and incidents across Azure. His work focuses on improving the way engineers understand failures, uncover risks, and strengthen reliability at cloud scale.

With a background spanning DevOps, cloud architecture, and modern application design, Chris brings both engineering depth and practical experience to the challenge of making large systems more resilient. He’s also a frequent international speaker who loves sharing real-world lessons about developer productivity, reliability, containers, and automation.

Outside of work, Chris is a proud dad, lifelong gamer, avid reader, and unapologetic nerd.

Michele Leroux Bustamante is Cofounder and CEO at Solliance (solliance.net), Founder of PolicyServer (policyserver.com), in addition to being a Cloud / Security architect, and a Microsoft Regional Director since 2003. Michele is recognized in many fields including software architecture and design, identity and access management, cloud and microservices architectures, security and compliance, and DevOps. During the past 25 years, Michele has held senior executive positions at several organizations, assembled and led high performing teams, and drove delivery and customer success at scale. Michele provides technical and business leadership at Solliance - and shares learnings through workshops, presentations and keynotes. Michele has been published regularly during her entire career including the best-selling book ''Learning WCF'' (O'Reilly 2007) and Developing Microsoft Azure Solutions 2nd Ed. (MS Press 2017). @michelebusta


Infrastruktur utviklar i team Kjøremiljø i Oslo Origo, kommunens digitaliseringsetat med ein fasinasjon for klarspråk, kommunikasjon og krysskompetanse i team. Har jobba som utviklar i 20+ år med alt fra infrastruktur til frontend.

Cody Burkard is the founder of Daze Security, a pentester and security architect specializing in Azure security. With 8 years of experience in Azure and application security testing, Cody's research interest is on novel offensive security techniques against cloud environments, and how to build resilient architectures to protect against them.

Mackenzie is a developer advocate with a passion for DevOps and code security. As the co-founder and former CTO of a health tech startup, he learnt first-hand how critical it is to build secure applications with robust developer operations. 
Today as the Developer Advocate at GitGuardian, Mackenzie is able to share his passion for code security with developers and works closely with research teams to show how malicious actors discover and exploit vulnerabilities in code. 


Magno is an information security specialist with a focus on application, cloud, and container security, as well as DevSecOps, currently working at Jane as a Staff Security Engineer. He leads the security champions program, among other security enablement activities. Before Jane, he worked at Okta and Trend Micro. He is a speaker at worldwide security conferences, including DEFCON, OWASP AppSec, SecTor, NorthSec, and BSides, among others. He holds certifications from multiple organizations, including SANS, CompTIA, EC-Council, AWS, and Microsoft.

Stefán Jökull has been a professional programmer for over 20 years, although he wrote his first BASIC program on an old Amstrad CPC 464 way back in 1986. He works remotely from Iceland where he focuses on improving Have I Been Pwned. He has a lot of experience with systems that require attention to details and have high customer impact.

Stefán is also a Microsoft MVP, a member of the .NET Foundation, and specializes in all things .NET with a focus on performance, security, and analytics/telemetry.

When he's not working, he enjoys time with the family, working on OSS software, building Lego sets and having the occasional beer when meeting fellow developers.

Philippe De Ryck specializes in making web security accessible to developers and architects, leveraging his Ph.D. from KU Leuven to inform his comprehensive understanding of security challenges. As the founder of Pragmatic Web Security, he provides practical security training and consulting services to organizations worldwide. 

His online course platform offers a self-paced approach to learning about security. Philippe also actively helps shape OAuth 2.0 best practices as the co-author of the best practices for browser-based apps specification. 

Philippe is recognized as a Google Developer Expert, acknowledging his contributions to web application and API security. He also organizes SecAppDev, an annual week-long application security course in Belgium.

Armin Buescher is an R&D leader at RSAC focused on practical applications of large language models in cybersecurity. His work centers on designing evaluations, stress-testing limitations, advising companies on AI programs, and building prototypes. With 15+ years across the cybersecurity stack, from malware analysis to cloud security, he began building ML detection systems at Symantec/Norton and advanced AI techniques through recent LLM breakthroughs. At Crosspoint Labs, Armin contributed across the PE value chain through due diligence, leadership partnerships, and AI support systems. Earlier R&D roles at FireEye, Blue Coat, and Websense led to patents and zero-day disclosures. A regular conference speaker and media spokesperson, he holds an MSc in Computer Science from TU Dortmund.

Scott Helme is a security researcher, consultant and international speaker. He can often be found talking about web security and performance online and helping organisations better deploy both.

Founder of report-uri.com, a free CSP report collection service, and securityheaders.com, a free security analyser, Scott has a tendency to always be involved in building something new and exciting.

Dawid Czagan is an internationally recognized security researcher and trainer. He is listed among top hackers at HackerOne. Dawid Czagan has found security bugs in Apple, Google, Mozilla, Microsoft and many others. Due to the severity of many bugs, he received numerous awards for his findings.

Dawid Czagan shares his offensive security experience in his hands-on trainings. He delivered trainings at key industry conferences such as DEF CON (Las Vegas), OWASP Global AppSec EU (Barcelona), Hack In The Box (Amsterdam), CanSecWest (Vancouver), 44CON (London), Hack In Paris (Paris), NorthSec (Montreal), HITB GSEC (Singapore), BruCON (Ghent) and for many corporate clients. His students include security specialists from Oracle, Adobe, ESET, ING, Red Hat, Trend Micro, Philips and government sector (references are attached to Dawid Czagan's 

Dawid Czagan is the founder and CEO at Silesia Security Lab. To find out about the latest in his work, you are invited to subscribe to his 

https://silesiasecuritylab.com/newsletter

https://www.youtube.com/channel/UCG-sIlaM1xXmetFtEfqtOqg

https://www.linkedin.com/in/dawid-czagan-85ba3666/

Jim Manico is the founder of Manicode Security where he trains software developers on secure coding and security engineering. He is also an investor/advisor for KSOC, Nucleus Security, Signal Sciences, and BitDiscovery. Jim is a frequent speaker on secure software practices, is a Java Champion, and is the author of 'Iron-Clad Java - Building Secure Web Applications' from Oracle Press. Jim also volunteers for OWASP as the project co-lead for the OWASP ASVS and the OWASP Proactive Controls.

I’m pursuing a PhD on web privacy at DistriNet, KU Leuven. My interdisciplinary background in computer science and European law allows me to combine both domains for my research. Currently, my work focuses on online tracking, exfiltration of personal data on the web and data protection law. More specifically, I analyze whether websites give privacy-friendly options to users and whether privacy legislation has an impact on their behavior.

NDC { Security }

Speakers

Become a Partner

Venue

All talks from NDC Security 2025

Pictures from NDC Security 2025

Partners

Tickets

Become a Partner

FAQ

Code of Conduct