Full Name
Brendon McCaulley
Job Title
Chief Security and AI Enablement Officer
Company
ConnexPay
Speaker Bio
I am a CISO who builds. Not just policies and frameworks, but production applications and SOC automation that deliver measurable business outcomes.
At ConnexPay, I designed and delivered Project Aegis: an AI-powered security program that enables a 3-person InfoSec team to operate at 15-20x capacity, surfacing insights from 70M+ daily security signals that were impossible to identify manually. Ten security and AI-enablement applications. Thousands of commits and automated tests. 90%+ SOC auto-resolve rate with zero false escalations. Low hundreds per month in AI costs, displacing $75-150K/year in vendor SaaS.
Beyond scale, the bigger shift has been in outcomes: major upgrades to SCA, SAST, SOC automation, and vulnerability management have driven measurable reductions in time-to-remediation and faster incident/investigation resolution.
The philosophy: small teams shouldn't accept small-team limitations. With agentic AI, maker-checker quality gates, and disciplined engineering practices, a lean security org can deliver higher velocity, improved quality, and reduced risk at a fraction of traditional cost.
What I build:
- Autonomous SOC operations that reduced triage from hours to minutes, eliminating 93% of false escalations
- Continuous vulnerability scanning across 153+ repos with risk-prioritized remediation and executive-ready posture reporting
- MCP servers, skills, plugins, and agents extending AI across security and other ConnexPay functions
- Automated evidence collection for PCI DSS and SOC 2 audits, cutting audit cycle time by 66% and reducing findings; now expanding toward end-to-end automated audit-cycle management
- Multi-agent AI engineering teams that doubled development velocity without adding headcount
- Full-stack security platforms on Azure (Next.js, TypeScript, PostgreSQL, Bicep IaC)
- AI governance frameworks: responsible use policies, autonomous agent safety controls, and regulatory alignment (EU AI Act, NIST AI RMF, ISO/IEC 42001)
Before ConnexPay: security programs at Optum (UnitedHealth Group), VPay, and Heartland Payment Systems, all in payments and healthcare, regulated environments requiring security that enables rather than blocks.
President of ISSA North Texas (2026), the largest ISSA chapter globally, leading strategy and programming for 500+ cybersecurity professionals.
Specialties: AI-Augmented Security Ops, Agentic AI Architecture, SOC Automation, Vulnerability Management, Zero Trust, Azure Cloud Security, DevSecOps, PCI DSS, SOC 2, NIST CSF 2.0, HIPAA, Security Program Development, AI Governance, AI Risk Management
At ConnexPay, I designed and delivered Project Aegis: an AI-powered security program that enables a 3-person InfoSec team to operate at 15-20x capacity, surfacing insights from 70M+ daily security signals that were impossible to identify manually. Ten security and AI-enablement applications. Thousands of commits and automated tests. 90%+ SOC auto-resolve rate with zero false escalations. Low hundreds per month in AI costs, displacing $75-150K/year in vendor SaaS.
Beyond scale, the bigger shift has been in outcomes: major upgrades to SCA, SAST, SOC automation, and vulnerability management have driven measurable reductions in time-to-remediation and faster incident/investigation resolution.
The philosophy: small teams shouldn't accept small-team limitations. With agentic AI, maker-checker quality gates, and disciplined engineering practices, a lean security org can deliver higher velocity, improved quality, and reduced risk at a fraction of traditional cost.
What I build:
- Autonomous SOC operations that reduced triage from hours to minutes, eliminating 93% of false escalations
- Continuous vulnerability scanning across 153+ repos with risk-prioritized remediation and executive-ready posture reporting
- MCP servers, skills, plugins, and agents extending AI across security and other ConnexPay functions
- Automated evidence collection for PCI DSS and SOC 2 audits, cutting audit cycle time by 66% and reducing findings; now expanding toward end-to-end automated audit-cycle management
- Multi-agent AI engineering teams that doubled development velocity without adding headcount
- Full-stack security platforms on Azure (Next.js, TypeScript, PostgreSQL, Bicep IaC)
- AI governance frameworks: responsible use policies, autonomous agent safety controls, and regulatory alignment (EU AI Act, NIST AI RMF, ISO/IEC 42001)
Before ConnexPay: security programs at Optum (UnitedHealth Group), VPay, and Heartland Payment Systems, all in payments and healthcare, regulated environments requiring security that enables rather than blocks.
President of ISSA North Texas (2026), the largest ISSA chapter globally, leading strategy and programming for 500+ cybersecurity professionals.
Specialties: AI-Augmented Security Ops, Agentic AI Architecture, SOC Automation, Vulnerability Management, Zero Trust, Azure Cloud Security, DevSecOps, PCI DSS, SOC 2, NIST CSF 2.0, HIPAA, Security Program Development, AI Governance, AI Risk Management
Speaking At
