Quick clarification -- we're seeking a vote on filling three Tech Lead slots, not asking TOC to choose between them!

On Sun, Feb 16, 2020 at 6:02 PM Sarah Allen via Lists.Cncf.Io <sarah=ultrasaurus.com@...> wrote:

Dear Technical Oversight Committee,

In January, the SIG-Security co-chairs along with then TOC liason’s Joe Beda and Liz Rice, agreed to nominate three Tech Leads for SIG-Security: Justin Cappos, Emily Fox and Brendan Lum. Due to the TOC election vote freeze we held off on submitting the nomination till now.

“Tech leads are assigned following a 2/3 majority vote of the TOC and a 2/3 majority vote of SIG Chairs” — cncf-sig elections

See below for more details on each of the nominated tech leads.  Liz suggested that an email vote would be fine, though if anyone wants to suggest alternate process or has questions, let us know.

Thank you!

Sarah Allen

SIG-Security Chair

———-

SIG-Security Tech Lead nominations:

Justin Cappos

• SIG-Security highlights

• Security Assessment Facilitator, Meeting Facilitator

• Instrumental in bringing in assessment model to SIG-Security. In 2018, conducted SPIFFE/SPIRE audit as TOC contributor, presented to SAFE WG and proposed initial guidelines (Nov 2018) then with collaboratively on PR#140 (Jan - Apr 2019)

• Professional affiliations: 

• Associate Professor, Computer Science and Engineering NYU

• NYU Center for CyberSecurity

• NYU Secure Systems Lab

• Github: @JustinCappos

• CNCF Projects: TUF, in-toto

• SIG-Security commits

Emily Fox

• SIG-Security highlights 

• Cloud Naitive Security Day Lead

• Defined categories for supply chain compromise catalog PR#304

• Process & governance (examples: assessment process docs, code of conduct)

• Professional affiliations:

• DevOps Security Lead, NSA 

• Github: @TheFoxAtWork

• CNCF Projects: n/a

• SIG-Security commits
  
  

Brendan Lum

• SIG-Security highlights

• Triage team, Meeting Facilitator 

• Security reviewer on both initial assessments (in-toto and OPA)

• Security reviewer conflict of interest guidelines PR#247

• Presented SIG-Security session China June 2019, San Diego Nov 2019

• Organized in-person meetup DockerCon, May 2019 issue#151

• Professional affiliations: 

• IBM Research, container security

• Technical Lead: Encrypted Container Images

• Technical Advisor: Design and Architecture. Trusted Identity Project

• Community manager/maintainer of runnc, runtime for Nabla Containers

• https://www.linkedin.com/in/brandon-lum-a7b79418/

• Github: @lumjjb

• CNCF Projects: n/a

• SIG-Security commits