Iman Ghanizada

Working on something new · Los Angeles

Iman Ghanizada

Selected writing

About

Trust & reliability enabled the modern world. Your ability to bank, communicate, transact, and conduct global commerce is all thanks to inventions of computer scientists since the early research on Multics, Diffie-Hellman, to MIT Project Athena, SSL/TLS and the list goes on. LLMs can not yet offer the assurances needed to dramatically accelerate enterprise ROI[1]. As capital formation shifts towards CapEx and frontier AI gets commoditized — the global economy remains in dire need of a productivity boom and the United States needs a proprietary intelligence advantage.

Today, I'm working on a new kind of artificial intelligence whose sole purpose is to universally accelerate economic growth. Stay tuned.

I spent fifteen years building trusted infrastructure for the most prominent institutions around the world, from national security contractors, sovereign entities, politically targeted firms, financial & clinical institutions, and leading software companies. I've operated within every single nook and cranny of the global technology landscape from engineering, to management, to all ends of the commercial side.

This involved racking and stacking AWS infrastructure at IAD6, migrating U.S. defense contractors onto PKI after the RSA breach[2][3], scaling systems engineering from Series B to C at an early NLP pioneer (Clarabridge, acq. by Qualtrics), migrating systems off ESXi to Azure and defending K St lobbying firms alongside the intelligence community against DEEP PANDA[4] — a Chinese state-sponsored campaign, securing the first and largest all-in cloud migration in financial services history at Capital One[5], and leading Google Cloud's most sophisticated cloud, AI, & security transformations — including the development of the novel security primitives for Mayo Clinic's landmark $1B partnership[6][7].

As the first forward deployed engineering (fka consulting) hire in Southern CA and then US-West, I was fortunate to participate in several billion dollars of the largest, most complex technology deals. People don't come to Google to buy compute, they come to build novel solutions that transform the world. I pulled together the first cross-Alphabet project using Vertex, drones, and Google Maps to mitigate wildfire risk with SCE[8], led the security track of the migration and development of Activision-Blizzard's cloud infrastructure[9], unblocked key strategic risks to Apple's growing relationship with GCP[10], and got to learn from and work alongside the most talented people in the world through it all. So much of my career has intersected between systems and AI, with chapters of security woven in between — this experience was by far my favorite.

In 2021, I left cloud consulting to start up the Security Operations Solutions function where I authored Google's Autonomic Security Operations[11][12] and Continuous Detection, Continuous Response (CD/CR)[13]. This was in response to every customer asking “How does Google secure Google?” We leveraged these frameworks to build solutions to deploy our technologies and services to national security operations centers for the United States[14] & allied countries[15][16], enterprises[17][18][19], and channel partners worldwide[20][21]. This served as the strategic messaging powering acquisitions[22], new business units[23], and our global salesforce. I delivered over a hundred executive briefings to the most sophisticated organizations around the world.

Security teams around the world enroll their organizations into our Coursera Modern Security Operations certification[24] that turned ASO into a movement. ASO became one of the pillar theses for the AI SOC industry that we directly shaped Gartner's market view with. In addition, multiple venture backed startups leverage this methodology to deliver value, including the unicorn Tenex.AI[25] and new entrants who claim this as their own invention[26] — don't worry, it's flattering.

Along the way I wrote the official McGraw Hill certification book on Google Cloud[27], directed Google's research program with the MITRE Center for Threat-Informed Defense[28] where we launched countless industry-wide research projects, and was a frequent keynote speaker worldwide[29] — including Google Cloud Next across multiple years[30][31], to audiences of 30,000+. I sit on various boards across Virginia Tech[32], Tenex.AI[33], Afghan Refugee Relief 501(c)(3)[34], and other institutions.

I'm part of the generation who was fortunate to experience the pre-Y2K world (remember that whole fiasco?). The first time in the timeline of civilization that our lives exist more on electricity than in real life. The early days of the commercial web were incredible though. Every new website and software felt like discovering a new part of the world map. 36 floppy disks to upgrade operating systems, NetZero, ICQ. I spent thousands of hours across every video game known to mankind, deployed computer security tools in IRC chats and made countless prank calls in Ventrilo back when Skype was free.

When I was 12, I started selling custom PCs to my brother's friends and landed my first paid job doing Windows sysadmin at age 14 (decades later Server 2000 is still a thing). My family is far more impressive than I ever will be, having provided a deep history of service to the Nation. My siblings spent their early careers at the Department of Homeland Security, CBP, and DOJ, cousins enlisted in the Army, and I did a slight stint with a DoD contractor and stayed in the private sector. Iraj[35] was also the lead incident responder for one of the largest breaches in history at Capital One[36], and Sajad[37] worked on one of the defining investigations of the internet. All of the value we've been able to create to date was thanks to my uncle in New Jersey who donated a Windows 3.1 computer to us in the mid 90s. He worked at Skytel — I'll never forget that giant satellite phone plugged into his red Toyota Celica.

I owe it all to my folks, who one day had to leave their homes abruptly, not knowing where they were going or if they'd ever be back, escaping brutal communism in Afghanistan. After two years of living in a refugee camp they landed in Fairfax, Virginia, where I was born. They worked several jobs, yet managed to put on VHS tapes to learn English when they got an hour to do so, and sacrificed their lives for us without ever looking back. All of the issues in society today have to do with parenting, and damn am I grateful to have experienced life with them.

It reminds me of a famous quote from John Adams, “I must study Politicks and War so that my sons may have liberty to study Mathematicks and Philosophy.” My parents are my evidence that the American Dream persists even when it seems impossible. Their story is a reminder that at a time when our country is divided, losing hope, and turning to false ideologies like socialism — this is the only nation whose laws and values can make the impossible possible. Don't look back, make the impossible possible.

One bit of wisdom I'll leave you with.

Crisis creates the conditions under which courage and action become disproportionately valuable.

Perhaps it was not by chance that I was placed here in this moment of time; perhaps the universe requested my assistance in shaping this moment in time.

Be courageous, take bold actions — your family, your neighbor, your country, and the world depend on you.

References

  1. OWASP GenAI Security Project — Top 10 Risks for LLM Applications
  2. Wired — The full story of the RSA hack
  3. ABC News — DoD contractors and the RSA attack
  4. CrowdStrike — Deep Panda targeting think tanks
  5. AWS — Capital One all-in on AWS
  6. NCBI Bookshelf (NIH) — Mayo Clinic cloud architecture
  7. Mayo Clinic News Network — Mayo selects Google
  8. Deloitte / WSJ — Fighting fire with tech at SCE
  9. PR Newswire — Activision Blizzard & Google Cloud
  10. Data Center Dynamics — Apple & Google Cloud
  11. Google Cloud Blog — Introducing Autonomic Security Operations
  12. Google Cloud Blog — ASO modernization resources
  13. Google Skills — Continuous Detection, Continuous Response
  14. Google Cloud Blog — ASO for the US public sector
  15. Times Kuwait — Kuwait CyberShield initiative
  16. Google Cloud Blog — CyberShield
  17. YouTube — Lloyds Banking Group: enabling continuous detection and response (CD/CR) to automate security operations
  18. Mobile Europe — BT resells ASO as a managed service
  19. Wealthsimple (Medium) — Modernizing security operations
  20. Netenrich — Guide to Autonomic Security Operations (PDF)
  21. PR Newswire — Cyderes CNAP upgrades
  22. CRN — Google completes Mandiant acquisition
  23. PR Newswire — Google Cybersecurity Action Team
  24. Coursera — Modern Security Operations
  25. CyberTechnology Insights — Tenex launches
  26. VentureBeat — Mate Security on CD/CR
  27. Amazon — Google Cloud Professional Cloud Architect (McGraw Hill)
  28. MITRE CTID — Leadership Spotlight: GCP
  29. YouTube — SINFO 30 keynote
  30. Google Cloud Blog — Prediction: most SecOps will be automated
  31. YouTube — Google Cloud Next
  32. Virginia Tech — Advisory board
  33. Tenex.AI — Meet the Tenexers
  34. Afghan Refugee Relief
  35. LinkedIn — Iraj Ghanizada
  36. Capital One — 2019 incident facts
  37. LinkedIn — Sajad Ghanizada

Talks

Top 10 Cloud Technology Predictions — Google Cloud Next '22 Developer Keynote, ~33,000 attendees.
If you're not thinking about the future, you're living in the past — SINFO 30 keynote, Lisbon, 2023.
Live Security Q&A — Google Cloud Next '21.

Selected talks

Research & open source

Press

Forbes on the launch of the "SOC of the Future" · Bloomberg, quoted alongside CISA · Infosecurity Magazine on coining autonomic security operations · VentureBeat · Forbes 30 Under 30

Media