SEI Members of Technical Staff
179 episodes listed below
PRESS PLAY
Each webinar features an SEI researcher discussing their research on software and cybersecurity problems of considerable complexity. The webinar series is a way for the SEI to accomplish its core purpose of improving the state-of-the-art in software engineering and cybersecurity and transitioning this work to the community. The SEI is a federally funded research and development center sponsored by the U.S. Department of Defense and operated by Carnegie Mellon University. The SEI Webinar Series is produced by SEI Communications Outreach.
Based on 6 episodes we listened to · September 2026
SEI connects cybersecurity and software research to the organizational decisions that determine whether new tools work safely in practice.
Software Engineering Institute (SEI) Webcast Series brings practitioners into structured presentations and audience Q&A on software delivery, cybersecurity, and emerging technical risk.
A perfectly followed process can still hand you a concrete life jacket.
Press play if you want
Short reviews from the PlayNext desk, based on the episodes we processed.
A practical look at AI in the SOC that keeps humans, risk, and effectiveness in view.
This SEI webcast treats the AI-enabled SOC as an operating problem, not a slogan. Justin Novak and Chris Rodman stay close to how defenders work in practice: repetitive alert handling, capacity building, and the constant tradeoff between speed and judgment.
A practical guide to turning CNS language into implementation.
The session centers on the handoff point around the Capability Needs Statement, showing software acquisition in terms of the capabilities the warfighter needs rather than a detailed requirements document.
A practical look at how SEI is using AI to build cyber capacity.
SEI frames AI as a usable tool for growing cyber capacity and mission readiness, and the discussion stays close to how that plays out in practice.
A practical webcast on readiness habits and planning documents for the software acquisition pathway.
Software Acquisition Pathway: Ready, Set, Go! frames software acquisition as a readiness problem before it becomes a process problem. Eileen Rubel and Bridget O'Hearn tie Agile culture, continuous user engagement, and DevSecOps back to policy, then use the draft capability needs…
A practical case for simplifying DevSecOps by bringing the right people in early.
Right-Sized DevSecOps treats tool sprawl as a delivery problem as much as a technical one. The talk is strongest when it argues for pulling security, development, and operations into the same conversation early, before teams end up rejecting artifacts, waiting on approvals, or…
A grounded SEI discussion on keeping requirements specific enough to guide teams without making them restrictive.
Poorly defined requirements can pull software systems design off course before implementation even begins. This SEI webcast keeps that familiar problem practical, arguing for requirements that are clear enough to guide the work without becoming so narrow that they box developers…
A practical Q-Day briefing that turns quantum migration into sequencing, controls, and security investment.
Q-Day is treated less as a looming headline than as a practical planning challenge. Matthew Bukovic, Technical Director for Cyber Risk and Resilience, guides Brett Tucker and Jan Justice through the difference between quantum and classical computing, then brings the focus back…
Specialists walking through software's tradeoffs, one system at a time.
Founders and engineers on AI coding agents like Claude Code, and supply chain security.
The engineering decisions behind code, agents, and control.
Python tools, practical trade-offs, and the occasional programming joke.
Matt Stratton interviews DevOps practitioners on security, platform engineering, and trusting AI-written code.
SEI's webcast on building an AI-enabled security operations center puts Justin Novak and Chris Rodman on the record about how generative AI and agentic AI should fit into SOC work.
SEI Webcast Series "Software Acquisition Go Bag: Cracking the CNS Code" at Carnegie Mellon University in Pittsburgh, Pennsylvania centers on the Capability Needs Statement, or CNS, for the Software Acquisition Pathway.
["SEI webcast 'Leveraging AI to Build Cyber Capacity' opens at Carnegie Mellon University in Pittsburgh, Pennsylvania, with Chris May introducing Dustin Updike, Jarrett Booz, and Toby Meyer.", "May frames cyber capacity as workforce readiness and productivity, not abstract AI theory, and asks how people can use AI to do mission work better.", "Updike describes a three-gate path from adoption to safety and quality assurance to cost, using the Gartner hype cycle and GenAI.mil as examples.", "Booz and Meyer show concrete uses of agentic AI: dev containers, CUI-compliant cloud models, 70-to-100 document corpora, and rapid builds such as a protocol analyzer and training content."]
This episode introduces a webcast series on software acquisition pathways for the Department of Defense, featuring experts discussing the 'Software Acquisition Go Bag' concept.
Joseph Yankle hosts the SEI Webcast Series episode Right-Sized DevSecOps: How Tooling Complexity Breaks Modern Pipelines from Carnegie Mellon University in Pittsburgh with David Shepard and Vaughn Coates.
Lindsey Hughes says the first step is comparing the utility tree with stakeholder scenarios to catch disagreement early.
The SEI webcast lays out five essential questions for programs adopting the software acquisition pathway, which DoDI 5000.87 defines and a March 6 Secretary of War memo made the preferred route for software.
Dan Bukovic says Q-Day planning needs a shelf-life calculation, because "if you pick 2040 and it's a 10-year shelf life," migration has to happen before 2030.
The Software Engineering Institute webcast examines generative AI across software engineering and Department of Defense acquisition during a 90-minute panel.
SEI researchers distinguish generative AI from discriminative AI by contrasting new-content creation with classifying spam, cats, or dogs.
A panel of SEI researchers discuss the practical benefits of early architectural models for cyber-physical systems, based on a paper presented at a symposium.
A webinar discussing the top five challenges in adopting DevSecOps practices, featuring experts from the Software Engineering Institute.
An SEI researcher discusses ensuring DevSecOps pipelines function only as intended, focusing on security and reliability.
Hasan Yasar discusses the relevance and evolution of software engineering buzzwords like DevOps in a webcast format.
This episode discusses adapting Agile and DevSecOps practices to improve non-software development teams.
The SEI panel describes Heartbleed as an OpenSSL information-leak flaw, illustrated by an XKCD cartoon in which a 'hat' request with a 500-letter length returns extra memory.