Iman Ghanizada

Building the next intelligence advantage · SF/LA/DC

Iman Ghanizada

About

The demand for intelligence is infinite, yet AI has barely begun to translate it into broad-based progress.

Today, I'm working alongside a small team of researchers to invent a new class of artificial intelligence whose sole purpose is to universally accelerate economic growth. Stay tuned.

I spent fifteen years building trusted infrastructure for the most prominent institutions around the world, from national security contractors, sovereign entities, politically targeted firms, financial & clinical institutions, and leading software companies. I invented Google’s Autonomic Security[1] vision alongside Dr. Chuvakin[2], powering national security and F100 worldwide. I pioneered Mayo Clinic’s “Data Behind Glass”[3] secure computing model for privacy-preserving AI, analytics, and patient-data infrastructure as part of their landmark $1B partnership.[4] I sit on boards including Virginia Tech[5], Tenex.AI[6], and Afghan Refugee Relief 501(c)(3)[7].

My career has intersected security, systems, and AI. This involved racking and stacking AWS, migrating U.S. defense contractors onto PKI after the RSA breach[8][9], scaling engineering to Series C at an early NLP pioneer (Clarabridge, acq. by Qualtrics[10]), modernizing and defending a Washington lobbying firm against state-sponsored cyberattacks[11], securing the largest cloud transformation in financial services history at Capital One[12], and leading Google Cloud's flagship cloud, AI, & security efforts.

I was the first forward deployed engineer in Southern CA in 2018, assembling the first cross-Alphabet ML engagement using Vertex AI, drones, and Maps to mitigate wildfire risk with SCE[13], led security for Activision-Blizzard's cloud[14], cleared board-level security blockers for Apple[15], Disney, and more.

In 2021, I started the Security Operations Solutions team where I authored Google's Autonomic Security Operations[16][17] and Continuous Detection, Continuous Response (CD/CR)[18]. We leveraged these frameworks to build solutions to deploy our technologies and services to national security operations centers for the United States[19] & allied countries[20][21], enterprises[22][23][24], and channel partners worldwide[25][26]. It became strategic messaging across Google's security business[27][28]. ASO became one of the pillar theses[29] we used to shape the AI SOC category with analysts. Enterprises worldwide hire for ASO by name[30], and venture backed startups build on the methodology, including unicorns[31] and new entrants[32].

I directed Alphabet’s research program with the MITRE Center for Threat-Informed Defense[33], wrote the official McGraw Hill Google Cloud Certified Professional Cloud Architect exam guide[34], the Coursera Modern Security Operations certification[35], and was a frequent keynote speaker worldwide[36] — including Google Cloud Next across multiple years[37][38].

I grew up pre-Y2K, when every new website felt like discovering a new part of the world. Spent endless hours gaming semi-professionally, built computer security tools deployed in IRC chats, and enjoyed the early days of hacking. It all started on a Windows 3.1 computer my uncle at Skytel gave us in the mid-90s — I'll never forget that giant satellite phone plugged into his red Toyota Celica. By 12 I was selling custom PCs to my siblings' friends, and at 14 I landed my first paid job doing Windows sysadmin.

My family is far more impressive than I'll ever be, with a deep history of service to the Nation. My siblings spent their early careers at DHS, CBP, and DOJ, and cousins enlisted in the Army. Iraj[39] was the lead incident responder for one of the largest breaches in history at Capital One[40], and Sajad[41] worked on two of the most defining computer security investigations of the internet.

I owe it all to my folks, who left their home abruptly, not knowing if they'd ever return, escaping communism in Afghanistan. After two years in a refugee camp they landed in Fairfax, Virginia, where I was born. They worked several jobs, learned English on VHS tapes in the spare hours, and sacrificed their lives for us without ever looking back.

John Adams wrote, “I must study Politicks and War that my sons may have liberty to study Mathematicks and Philosophy.”

Make the impossible possible — the world depends on you.

References

  1. Google Cloud Blog — Introducing Autonomic Security Operations
  2. Wikipedia — Anton Chuvakin
  3. NCBI Bookshelf (NIH) — Mayo Clinic cloud architecture
  4. Mayo Clinic News Network — Mayo selects Google
  5. Virginia Tech — Advisory board
  6. Tenex.AI — Meet the Tenexers
  7. Afghan Refugee Relief
  8. Wired — The full story of the RSA hack
  9. ABC News — DoD contractors and the RSA attack
  10. Qualtrics — Definitive agreement to acquire Clarabridge
  11. CrowdStrike — Deep Panda targeting think tanks
  12. AWS — Capital One all-in on AWS
  13. Deloitte / WSJ — Fighting fire with tech at SCE
  14. PR Newswire — Activision Blizzard & Google Cloud
  15. Data Center Dynamics — Apple & Google Cloud
  16. Google Cloud Blog — ASO modernization resources
  17. Infosecurity Magazine — How to build an autonomic SOC (independent credit for coining ASO)
  18. Google Skills — Continuous Detection, Continuous Response
  19. Google Cloud Blog — ASO for the US public sector
  20. Times Kuwait — Kuwait CyberShield initiative
  21. Google Cloud Blog — CyberShield
  22. YouTube — Lloyds Banking Group: enabling continuous detection and response (CD/CR) to automate security operations
  23. Mobile Europe — BT resells ASO as a managed service
  24. Wealthsimple (Medium) — Modernizing security operations
  25. Netenrich — Guide to Autonomic Security Operations (PDF)
  26. PR Newswire — Cyderes CNAP upgrades
  27. CRN — Google completes Mandiant acquisition
  28. PR Newswire — Google Cybersecurity Action Team
  29. Forbes — Google Cloud launches the “SOC of the Future”
  30. Robinhood — Staff Security Engineer, Detection & Response (ASO roadmap; archived job posting)
  31. CyberTechnology Insights — Tenex launches
  32. VentureBeat — Mate Security on CD/CR
  33. MITRE CTID — Leadership Spotlight: GCP
  34. Amazon — Google Cloud Professional Cloud Architect (McGraw Hill)
  35. Coursera — Modern Security Operations
  36. YouTube — SINFO 30 keynote
  37. Google Cloud Blog — Prediction: most SecOps will be automated
  38. YouTube — Google Cloud Next
  39. LinkedIn — Iraj Ghanizada
  40. Capital One — 2019 incident facts
  41. LinkedIn — Sajad Ghanizada

Watch

New · Sep 2026What it'll take to win in AI — full episode releasing soon.
Top 10 Cloud Technology Predictions — Google Cloud Next '22 Developer Keynote, ~33,000 attendees.
If you're not thinking about the future, you're living in the past — SINFO 30 keynote, Lisbon, 2023.

More talks →

Selected writing

Research & open source

Media