AI security & governance
AI threat modeling, adversarial testing, and maturity assessments that examine accountability, lifecycle controls, oversight, and system security.
Cybersecurity · AI governance · Human control
Technology moves fast.
Trust takes work.
I’m John Waller, a cybersecurity consulting leader, AI governance advisor, author, and speaker. I help organizations turn complex technology risks into practical decisions.
25+ yearsEngineering & technology
CISSPSecurity leadership
M.S. in AI/MLTechnical foundation
Author & speakerIdeas into action
01 / About
My work sits at the intersection of what technology can do and what organizations need it to do safely.
I began in software development, moved into cloud architecture and cybersecurity leadership, and now bring that foundation to AI security and governance. That path shapes how I advise: understand the system, examine the evidence, and give people a clear way forward.
At UltraViolet Cyber, I developed the AI Governance practice and lead cybersecurity assessments, cloud security reviews, and complex client engagements. I also lead a five-consultant team delivering security control assessments and continuous monitoring for a leading federal financial institution.
Based in Mystic, Connecticut, I write and speak about the technical and governance constraints needed to preserve meaningful human control over AI.
02 / Areas of focus
From risk to a way forward.
Technical depth, practical governance, and recommendations that executives and engineering teams can act on.
Cybersecurity & risk advisory
Security program reviews, control assessments, and continuous monitoring that translate evidence into prioritized remediation and executive roadmaps.
Cloud & secure engineering
Architecture and application security reviews across AWS, Azure, and GCP, informed by hands-on experience building software and operating cloud services.
Leadership & client partnership
Practice development, consultant mentoring, engagement delivery, and technical customer relationships that connect sound advice with lasting progress.
03 / Writing & ideas
Keeping humans
in control.
The Unconstrained Machine examines how technical and governance constraints can preserve meaningful human control as AI becomes more capable and autonomous.
“Humans inherit constraints developed over millennia. AI inherits only the constraints we deliberately engineer.”
The Unconstrained Machine · Pending publication
04 / Experience
A career connecting
systems and people.
Software engineering. Cloud services. Security leadership. AI governance. Each chapter informs the next.
Education & credentials
M.S., Artificial Intelligence & Machine Learning
Colorado State University Global, 2025
M.S., Information Technology
University of Massachusetts Lowell, 2018
CISSP · CCSK
Cyera AI Security, AI Governance & Agentic Security Practitioner
Risk Advisory Practice Lead
UltraViolet Cyber / Black Duck / SynopsysContinuous employment through corporate transitions. Developed the AI Governance practice, leads federal security assessment delivery, and advises enterprise clients on cybersecurity and technology risk.
Director of Information Security & Cloud Services
DocXellentLed cybersecurity, cloud operations, and software engineering for a SaaS provider. Built the enterprise security program and managed cloud services and technical customer relationships.
Cybersecurity Instructor
edX / University Cybersecurity BootcampsTaught hands-on offensive and defensive security at UConn and other university programs, helping students connect technical skills with real security challenges.
Software development & technical delivery
Enterprise applications, regulated pharmaceutical systems, and full-lifecycle software delivery at IMARK Group, Pfizer through Sunrise Systems, and other technology organizations.
05 / Speaking
Complex ideas.
Clear conversations.
I speak on AI security, governance, and human control, connecting technical realities with decisions that matter to organizations and society.
View my sessions on Sessionize ↗Cybercamp.ai
Brno, Czech Republic
Brno, Czech Republic
TechEx North America
San Jose
San Jose
OWASP BASC Conference
Boston
Boston
ISACA Research Triangle
Raleigh
Raleigh
AI Community Conference
Boston · Nov. 2026
Boston · Nov. 2026
AI for Rotary Clubs
Ongoing
Ongoing
Beyond the work
A curiosity that travels.
06 / Connect
Let’s talk about
what comes next.
For professional opportunities, speaking engagements, or a conversation about AI security and governance, get in touch.