Think Like a CISO

Cristian Ruvalcaba, CISSP, CCSP, MFA is a cybersecurity professional and strategist with over 20 years of experience spanning the corporate, government, energy, and fintech sectors. He is also the founder of and head researcher with Saluca Labs, a privacy-first and compliance-driven AI and cybersecurity research organization. Throughout his career, he has collaborated with CISOs, directors, and senior engineering leaders on detection strategy and maturity, incident response, security architecture, and SOC operations; helping organizations across four continents think more clearly about risk.

Cristian began his cybersecurity journey at Intuit in 2003, where he would eventually serve as a founding member of the company's Security Operations Center, building the operational processes and global incident response frameworks that would set the tone for the rest of his career. He went on to lead SIEM engineering teams at Optiv Security, where he drove detection strategy for multinational enterprise environments and reduced time-to-production for managed security customers by 75%. At IBM, he served as a Senior Cybersecurity Specialist in Threat Management, advising organizations on long-term security strategy, influencing the QRadar product roadmap through practitioner insights, and supporting over 30 million in influenced revenue across three years. His contributions earned multiple awards, including the IBM Golden Circle, two years in a row, and Entrepreneur Award.

A published author and thought leader, Cristian contributed an opening chapter to Advances in Security Information Management, 2013, and authored a SANS Gold Paper that reached the SANS Reading Room Top 25. He has spoken on panels alongside leaders from major cybersecurity organizations on topics including security architecture, MSSP evolution, SOC strategy, and SIEM modernization. As a lead instructor with ThriveDX, he also mentored the next generation of cybersecurity analysts and engineers through university bootcamp programs.

Cristian holds a Bachelor of Science in Computer Engineering and a Master of Fine Arts in Film Production, both from San Diego State University, a combination that reflects his belief that effective security leadership requires both technical rigor and the ability to communicate and tell a story. That creative background isn't just a footnote: he spent years performing improv and stand-up comedy and produced an award-winning short film, experiences that sharpened his ability to think on his feet, read a room, and deliver a message; skills any CISO will tell you are just as critical as understanding a kill chain.