Angie Agee

Short bio of the speaker

I build and run the threat-detection programs that regulated enterprises depend on to find and contain attackers before they cause material harm. Over more than a decade across financial services, global SaaS, and government and critical-infrastructure environments, I have owned the detection lifecycle end to end — from telemetry strategy and rule engineering through tuning, validation, and executive risk reporting — and translated technical exposure into the language boards and senior leaders act on.

My approach treats security operations as a core business capability, measured by containment speed, dwell-time reduction, clear escalation authority, and recovery readiness — not tool count. I align detection strategy to regulatory exposure (NIST, CMMC, PCI DSS, ISO 27001), establish decision rights and ownership, and give leadership defensible visibility into risk. I have engineered enterprise endpoint detection inside a regulated national bank, converted offensive-security findings into measurable detection uplift, and commanded incidents from triage through recovery.