Bob Callaway is the leader of Google’s Open Source Security Team (GOSST), spearheading initiatives to bolster the security of open source software, benefiting both Google and the global community. Under his leadership, the GOSST team develops and contributes to projects that address critical areas such as supply chain integrity, observability, and vulnerability management. GOSST also plays a pivotal role in managing essential internet infrastructure services, including OSV, Sigstore, and Certificate Transparency logs. Bob’s influence extends to advisory positions in key organizations: he serves as a member of the Technical Advisory Council for the OpenSSF, is a co-founder and technical steering committee member of Sigstore, and represents Google on the Alpha-Omega project leadership team. His extensive experience includes engineering and leadership roles at Red Hat, NetApp, and IBM. Bob holds a PhD in Computer Engineering from NC State University, where he also shares his expertise as an adjunct assistant professor in the ECE department.

Kevin King has over 20 years of experience across product, business development, co-founding companies, and customer experience. He is part of the Startup BD team at Amazon Web Services, where he works with startups from the world’s leading accelerators and incubators to help them go to market and scale. Kevin is also the founder of HANDWRTTN, a company dedicated to enhancing and modernizing the wonderfully analog experience of handwritten letters.  He is a contributor to the Alpha-Omega project, helping with project engagement and grants in service of open-source security.

On or off the clock,  Kevin can often be found running  — solving hours of problems in minutes of clarified thinking, fueled by physical activity.

Michael Scovetta leads a security team at Microsoft, focused on understanding and addressing emerging security threats related to open source software and the ecosystem around it. He and his team do this by building security tools, advising engineering teams, and evangelizing good practices. Within OpenSSF, Michael co-leads the Alpha-Omega project and leads the Identifying Security Threats working group. Michael brings around 25 years of software engineering and security experience and earned a Master of Engineering in Computer Science from Cornell University and  Bachelor of Science from Hofstra University.

Tom is a Principal Open Source Evangelist for AWS. He has been a part of the open source community since 1997, when he skipped his last day of junior high to go to Linux Expo. During college, he worked for a high-availability startup to cover tuition, and when they crashed along with the majority of the IT sector, he dropped out of college and went to work for Red Hat full-time. At Red Hat, he stayed for almost twenty years, in Support, Sales Engineering, Release Engineering, Engineering Management, University Outreach (CTO’s office), and Employment Brand. He’s an active contributor to Fedora and helped to write the Fedora Packaging and Legal Guidelines which are still in use today. He’s spoken at a number of conferences and events including SxSW, OSCON, Open Source Summit, and Red Hat Summit. He has one patent on a crazy idea that never got implemented in the real world, and is co-author of Raspberry Pi Hacks (2013, O’Reilly). When he’s not working, he finds enjoyment in 3D printing, pinball, games (board & video), geocaching, craft beer, B-movies, science fiction, trivia, and traveling. He lives in Cary, NC. Tom is also known as “spot” by many people in the open source universe, he’s gone by that nickname since the 1st grade, and he happily answers to it.

Michael Winser has been creating and delivering software applications since 1984. Michael’s experience spans over 25 years at Google and Microsoft and more than a decade of startups. More recently, Michael is the co-founder of the Alpha-Omega project and is a Security Strategy Ambassador for the Eclipse Foundation. He also provides product and strategy advice to various companies and organizations.

When not working on open source security, Michael enjoys wing foiling, skating, skiing, and spending time with his family.

Mila Zhou is an open source program manager at AWS, leading funding initiatives that provide crucial support to open source projects. Drawing from her multidisciplinary background in Digital Media Technology, Economics, and Taxation, Mila brings a unique blend of technical knowledge and financial acumen to her role. Her expertise in managing large-scale open source funding programs and measuring their impact has proven invaluable in setting metrics and providing successful examples for enterprise leadership.

Yesenia specializes in helping high-growth tech organizations secure the future of innovation by designing supply chain security programs that enable speed without sacrificing safety.  Yesenia brings 13 years of software engineering and cybersecurity and experience spanning incident response, security tooling, software supply chain security, open source security, and AI safety—currently, empowering the world with changes for AI Safety & Security and Open Source Security at Microsoft. Within OpenSSF, she is the co-host of the “What’s in the SOSS” podcast, co-lead of the BEAR (Belonging, Empowerment, Allyship, and Representation). Yesenia holds a Bachelors of Science in Computer Science from Florida International University and a Masters of Science in Digital Forensic from University of Central Florida.

Michelle Favalora is the Senior Program Manager II for Alpha-Omega, an OpenSSF associated project, leading core business operations and grantee relations. Michelle brings over 10 years of experience in project optimization and program strategy with a focus on process improvement and building teams.

Sally Cooper is the Senior Marketing and Communications Manager for Alpha-Omega, an OpenSSF associated project, leading all marketing and communications activities. Sally brings over 25 years of experience in technology, with expertise in making complex concepts easy to understand. She thrives in building brand awareness, fostering open source community engagement, and driving impactful social media strategies.