Qualys Security Conference

Qualys Security Conference

QSC London

May 16-17, 2023

Get More Security

Explore the security impacts of the digital journey and how to build in security automation from endpoints to the data center to the cloud. Join us in person to scale your capability and meet the challenges of ever-growing attack surfaces. Hear from industry experts, learn strategies and tactics to secure your organization, and network with your peers and other Qualys experts to accelerate your career.

Featured Speakers

Sumedh Thakar
President and CEO, Qualys

Shailesh Athalye
Senior Vice President, Product Management, Qualys

Frank Gardner OBE
Security Correspondent & Author, BBC

Mehul Revankar,
VP Product Management, VMDR, Qualys

Travis Smith
Vice President, Threat Research Unit, Qualys

Eran Livne
Director, Product Management Endpoint Remediation, Qualys

Kunal Modasiya
VP, Product Management, Attack Surface Management & AppSec, Qualys

Nayeem Islam
Vice President, Product Management, Qualys

Murat Dilek
Network, Infrastructure & Cyber Security Project Manager, Falkirk Council

Liam Baines
Security and Vulnerability Manager, Virgin Media O2

Ritesh Patel
Security Principal, BP

Mark Jones
Global Threat and Vulnerability Manager, Costa

Greg Coutouvidis
Director of Security Engineering and Operations, Centrica

Agenda

Kick off QSC on the Road on Tuesday, May 16. Meet old friends, make new ones, enjoy cocktails, and connect with Qualys experts and peers.

Training Sessions

Conference Sessions

8:30 Registration and Coffee
9:15 Keynote - Dynamics of CyberSecurity Risk on a Continuously Changing Attack Surface Sumedh Thakar, President and CEO, Qualys

Sumedh Thakar's bio

10:00 Managing & Reducing Risk with Qualys Platform Shailesh Athalye Senior Vice President, Product Management, Qualys

Shailesh Athalye's bio

10:45 Coffee Break
11:00 Keynote & Q&A: Global Security Horizon: What’s Next Frank Gardner OBE, Security Correspondent & Author, BBC

An unmissable strategic overview from award-winning Security Correspondent and Author, Frank Gardner OBE's on the emerging global security landscape.

11:45 Navigating Today’s Threat Landscape to Reduce Cyber Risk with Qualys VMDR and TruRisk Mehul Revankar, VP Product Management, VMDR, Qualys

As the threat of vulnerabilities and zero-day exploits soars, organizations must have rapid, efficient ways to respond. Legacy approaches struggle to keep up and often fall short. This session delves into how Qualys VMDR and TruRisk revolutionize the way enterprises visualize, measure and automate the remediation of risk and threats. Explore cutting-edge cyber risk management techniques and how these solutions empower IT and security teams to collaborate seamlessly, such as integrating with ITSM tools like ServiceNow. Learn how your organization can improve security posture, compliance, and risk reduction with actionable insights and powerful remediation strategies.

12:15 Moving from a vulnerability management to a risk based VM Program
Liam Baines, Security and Vulnerability Manager, Virgin Media O2
Paul Baird, CTSO, Qualys

Understand why organisations are moving from the traditional VM scanning to a full lifecycle program to reduce risk. Join the team as we discuss why and how you make the step change to a proactive risk reduction.

12:45 Lunch
14:00 Service Management Integration with Qualys
Ritesh Patel, Security Principal, BP

Learn how BP have integrated their vulnerability lifecycle program fully into their service management program, giving individual teams and owners full visibility of their risk and remediation requirements.

14:30 Unlocking Intelligence-Backed Remediation: Insights from the Qualys Threat Research Unit
Eran Livne, Senior Director, Endpoint Remediation, Qualys
Travis Smith, Vice President, Threat Research Unit, Qualys

The Qualys Threat Research Unit (TRU) collected and analyzed data from the 2022 threat landscape underpinning insights for the 2023 TruRisk Threat Research Report. In this session, you will learn key findings from the Threat Research Unit and how these contribute to intelligence-backed remediation strategies using Qualys Patch Management.

15:00 Detection is nothing without remediation
Murat Dilek, Network, Infrastructure & Cyber Security Project Manager, Falkirk Council
Mark Jones, Global Threat and Vulnerability Manager, Costa
Eran Livne, Senior Director, Endpoint Remediation, Qualys
Charles McAlpin, Director, Technical Account Management, Post-Sales, Qualys

Listen to a discussion of why security teams are taking more control of remediation functions to dramatically reduce their risk exposure. We will try and answer why we are not leaving it to the traditional patching teams, and how we got approval to do it in the first place!

15:30 Break
15:45 A Modern Approach for Protecting Multi-Cloud Environments Using Qualys Total Cloud
Nayeem Islam, Vice President, Product Management, Qualys

Digital transformation has accelerated the push of IT into multi-cloud environments. Legacy on-premises solutions don’t do cloud, which means security and compliance stakeholders must adopt solutions designed for cloud-native requirements. Qualys TotalCloud is a cloud-native solution that provides unified vulnerability, threat, and posture management across a multi-cloud environment. This session describes the components of TotalCloud, including cloud-native application protection platform (CNAAP), cloud security posture management (CSPM), cloud workload protection (CWP), infrastructure as code (IaC), cloud detection and response (CDR), and container security (CS).

16:15 Detecting real time cloud threats
Greg Coutouvidis, Director of Security Engineering and Operations, Centrica
Karl Alderton, Major Account Solution Architect, Qualys

Cloud security - Explore and share the journey to detecting real time threats in the cloud.

16:45 Attack Surface Management with an Attackers’ and Defenders’ View
Kunal Modasiya, VP, Product Management, Attack Surface Management & AppSec, Qualys

With CyberSecurity Asset Management 2.0 and EASM, Qualys provides security practitioners with both an outside-in and inside-out view of their entire attack surface, allowing them to see their assets as an attacker would. This new capability lets stakeholders who already trust Qualys for vulnerability management (VM) streamline detection, automatically prioritize threats with TruRisk, and rapidly remediate urgent threats
Learn from powerful use cases for CyberSecurity Asset Management 2.0 with EASM, highlighting:

  • How Qualys CyberSecurity Asset Management discovers your dynamic external attack surface, and what makes this offering unique
  • How to get real-time visibility of security blind spots and continuous risk assessment of your entire internal and external attack surface
  • Ingest and aggregate third-party threat data providing context for risk-based prioritization and remediation.
  • How to leverage one-click orchestrations to rapidly prioritize and mitigate risk with Qualys VM, Web App Scanning, Patch Management, ITSM and SOC tools.

17:15 Closing Remarks
17:15 Drinks Reception and Networking

Conference Highlights

Explore and secure the digital journey.

Dive into the profound impact of the digital journey and explore how to build in security automation from the data center to the cloud. Industry experts and Qualys leaders discuss automation strategies, preview product roadmaps, listen to your challenges, and answer your questions.

Get inspired.

Engage with Qualys’ customer-facing teams and your peers around best practices and user case studies for applying security automation to real-world challenges.

Sharpen your expertise.

One day of free training covers forward-looking strategies, best practices to improve effectiveness and productivity, and core and expanded product features to up-level your security program.

Who Should Attend

CIOs, CSOs and CTOs; directors and managers of network, security and cloud; developers and DevSecOps practitioners; Qualys partners and consultants; or any forward-thinking security professionals.

Click here to read insights from last year’s QSC London

Sheraton Grand London Park Lane
London, UK

Qualys Security Conference will be held at the Sheraton Grand London Park Lane.

Piccadilly, London
W1J 7BX, United Kingdom
T: +44 20 7836 2400
Sheraton Grand London Park Lane - London | Marriott Bonvoy


Conference Pricing

Attendance at QSC is complimentary. This includes access to all general sessions, breakfast, lunch, breaks, and training.

Travel and hotel accommodations are not included with QSC or pre-conference training.

Sheraton Grand London Park Lane
Mark Jones

Mark Jones

Global Threat and Vulnerability Manager, Costa

Mark is currently the Global Threat and Vulnerability Manager for Costs Coffee and for the last 8 months has been responsible for helping to reduce the external and internal threats the company face using different aspects of the Qualys suit to do so. Before this he has worked in multiple well-known companies in banking and broadcasting performing a similar role for the past 8 years.

Travis Smith

Travis Smith

Vice President, Threat Research Unit, Qualys

Travis is the Vice President of Malware Threat Research at Qualys. He has spent the past 15 years in the security industry with a focus on digital forensics and incident response. He holds a wide array of certifications ranging from GIAC Certified Penetration Tester to the CISSP, as well as an MBA with a concentration in information security. Travis has presented his research at conferences worldwide at venues such as BlackHat, RSA, and SecTor.

Nayeem Islam

Nayeem Islam

Vice President, Product Management, Qualys

Nayeem Islam is the Vice President of Product Management at Qualys for the TotalCloud initiative. Prior to joining he was founder and CEO of Blue Hexagon, a cloud security company that pioneered the use of AI to detect cloud threats. Blue Hexagon is now part of Qualys.

Ritesh Patel

Ritesh Patel

Security Principal, BP

Ritesh Patel is Security Principal at BP, responsible for owning, developing and operating services which reduce the attack surface and vulnerabilities within BP. Ritesh is a solutions‐orientated security engineering professional with more than 20 years of experience developing and implementing complex infrastructures and technical solutions for industry leaders. Has high expertise in the design, installation and configuration of solutions to drive company growth and technical innovation and automation as well as proficient in determining system requirements and resolving technical issues quickly.

Sumedh Thakar

Sumedh Thakar

President and CEO, Qualys

As President and CEO, Sumedh leads the company’s vision, strategic direction and implementation. He joined Qualys in 2003 in engineering and grew within the company, taking various leadership roles focused on helping Qualys deliver on its platform vision. From 2014 to 2021, he served as Qualys’ Chief Product Officer, where he oversaw all things product, including engineering, development, product management, cloud operations, DevOps, and customer support. A product fanatic and engineer at heart, he is a driving force behind expanding the platform from Vulnerability Management into broader areas of security and compliance, helping customers consolidate their security stack. This includes the rollout of the game-changing VMDR (Vulnerability Management, Detection and Response) that continually detects and prevents risk to their systems, Multi-Vector EDR, which focuses on protecting endpoints as well as Container Security, Compliance and Web Application Security solutions. Sumedh was also instrumental in the build-up of multiple Qualys sites resulting in a global 24x7 follow-the-sun product team.

Sumedh is a long-time proponent of SaaS and cloud computing. He previously worked at Intacct, a cloud-based financial and accounting software provider. He also worked at Northwest Airlines developing complex algorithms for its yield and revenue management reservation system. Sumedh has a bachelor’s degree in computer engineering with distinction from the University of Pune.

Frank Gardner OBE

Frank Gardner OBE

Security Correspondent & Author, BBC

Frank Gardner spent nine years as an investment banker in New York, London and Bahrain before switching to journalism and joining the BBC in 1995. Frank has reported extensively on the global ‘War on Terror’ in Guantanamo Bay, Yemen, Afghanistan, Iraq and elsewhere in the Middle East. In 2004 Frank survived being shot six times at close range by Al-Qaeda terrorists in a Riyadh suburb in Saudia Arabia. He went on to write the best-selling book Blood and Sand, the poignant story of what can happen to your belief system when the culture you have embraced ends up trying to kill you. Frank has gone onto write three best-selling spy thrillers Crisis, Ultimatum and Outbreak. He was awarded an OBE in 2005 for services to journalism. In 2018 he was awarded the University of Southern California’s Tommy Trojan Trophy for distinguished speaking. As a career broadcaster and a witty and gifted communicator, Frank shares his passion for the Middle East, travel and adventure. He draws on a unique perspective and understanding of both domestic and international security.

Shailesh Athalye

Shailesh Athalye

Senior Vice President, Product Management, Qualys Inc.

As Senior Vice President of Product Management, Shailesh leads the product management team and drives the Qualys product vision helping customers assess and improve their IT, security and compliance posture. Since joining Qualys in 2012, he has worked in various security and compliance roles driving innovative solutions, including remote endpoint protection, endpoint detection and response, and SaaS security. In addition, Shailesh headed engineering, research and product management for Qualys Policy Compliance and File Integrity Monitoring, where he helped customers go beyond compliance to drive their IT GRC objectives. Before Qualys, he focused on security research for Symantec ESM and Compliance solutions. Shailesh holds a master’s in computer applications (MCA) from the Vishwakarma Institute of Technology and has various security certifications including CISA, CRISC, CISM. He is also a regular speaker at industry conferences.

Murat Dilek

Murat Dilek

Enterprise Network & Cybersecurity Team Leader, Falkirk Council

As the lead officer spearheading critical initiatives within Falkirk Council’s ICT landscape, Murat Dilek is an accomplished professional dedicated to shaping and fortifying the organization’s digital infrastructure. With a wealth of experience in enterprise network management and Security Operations Centre (SOC) leadership, Murat has consistently demonstrated strategic vision and technical prowess.

One of Murat’s notable latest achievements has been the design and implementation of the Security Operations Centre (SOC) from the ground up. This involved defining robust processes, selecting and configuring cutting-edge security tools, and leading a team of skilled security analysts. Under their guidance, the SOC has become a linchpin in safeguarding the council’s digital assets against internal and external threats,
In the realm of cybersecurity, Murat architected and implemented a zero-trust network model, significantly enhancing security posture and mitigating potential threats effectively. Regular risk assessments and vulnerability management are second nature to Murat who addresses and mitigates security issues promptly to ensure the resilience of the ICT infrastructure.

Murat, a visionary architect and delivery leader, successfully orchestrated and implemented transformative projects, including Hybrid Cloud, Modern Workspace, SD-WAN, WiFi 6, immutable backup solutions, and data center relocation. He is dedicated to maintaining secure networks and information, gaining PSN Code of Conduct accreditation, and ensuring legal compliance across the organization. Their portfolio extends to full ownership of ICT disaster recovery, mitigating negative impact, and collaborating with corporate integrity and risk groups.

Mehul Revankar

Mehul Revankar

Vice President, Product Management and Engineering, Qualys

Mehul Revankar is a cybersecurity professional with more than 15 years of experience in Vulnerability Management, Policy Compliance and Security Operations. He leads Product Management and Vulnerability Research at Qualys for VMDR. Before joining Qualys, Mehul led the development of vulnerability and patch management products at SaltStack, and prior to that he led multiple research teams at Tenable. Mehul has a bachelor’s degree in electronics from the University of Mumbai and a master’s degree in computer engineering from George Mason University.

Greg Coutouvidis

Greg Coutouvidis

Director of Security Engineering and Operations, Centrica

My initial foray into computing was through programming. It was and still is a key skillset in what I do today. I believe that good security is good systems administration. My role at Centrica is working with the Chief Security Officer and the Head of Security Architecture to create and take ownership of the security product roadmap, evaluating and creating a capability matrix for each application, service or platform already in place, covering antivirus, DLP, EDR, Threat Protection, Threat Intelligence and Incident Response..

Liam Baines

Liam Baines

Security and Vulnerability Manager, Virgin Media O2

Liam Baines is the Senior Vulnerability Manager for VMO2 and is responsible for leading teams that carry out vulnerability management activities across the majority of the organisation. With over 24 years’ experience in the telecommunications and cable industry, Liam’s direct work with customers at the beginning of his career instilled in him a strong customer focus that has persisted throughout his professional life. He worked closely on the Analogue to Digital Cable TV conversion and the introduction of ground-breaking Video On Demand services before moving into multiple technical programme management and OSS roles. For the last 7 years, his focus has been on compliance and vulnerability management both in the UK and across Europe. He was involved in the inception of the initial Virgin Media vulnerability management programme and has been working on it ever since. Liam and his teams are currently working on rolling out Qualys across the VMO2 Estate.

Eran Livne

Eran Livne

Senior Director, Endpoint Remediation, Qualys

Eran Livne is Senior Director, Endpoint Remediation at Qualys, leading a team tasked with helping customers improve their security posture through cross-platform vulnerability remediation. He has more than 20-years of product management and computer science experience working in diverse IT and security markets. In 2014, Eran founded mobile security company, LetMobile, acquired by Ivanti. Following the acquisition, he drove Ivanti’s enterprise security and endpoint security and management solutions. Eran holds a bachelor’s degree in computer science from Tel Aviv University and an MBA in high-tech business administration from Technion - Israel Institute of Technology.

Kunal Modasiya

Kunal Modasiya

Vice President, Product Management, Attack Surface Management & AppSec, Qualys

Kunal is currently VP of Product Management for the CyberSecurity Asset Attack Surface Management (CAASM), Web App and API Security product line at Qualys HQ in Foster City, CA. He is Qualys boomerang. He worked at Qualys for 3 years and incubated the XDR product line from inception. Kunal has spent 15+ years working at startups, and big and mid-size companies in cybersecurity, networking, and application security in both product and engineering roles at Juniper Networks, Extreme Networks, Sun Microsystems and Infinera. Prior to re-joining Qualys, Kunal was heading products at Israeli startup in API security and bot management AppSec space.