Members of Technical Staff at the Software Engineering Institute
430 episodes listed below
PRESS PLAY
The SEI Podcast Series presents conversations in software engineering, cybersecurity, and future technologies.
Based on 6 episodes we listened to · September 2026
SEI turns engineering research into concrete discussions of deployment constraints, security failures, organizational authority, and operational tradeoffs.
The Software Engineering Institute (SEI) Podcast Series keeps technical systems tied to the conditions in which they must actually work. Its interviewer-led conversations move from Kubernetes deployments on disconnected edge devices and Docker container security to wireless…
Sneakernet meets Kubernetes here, if you like your infrastructure problems with actual physical logistics.
Press play if you want
Short reviews from the PlayNext desk, based on the episodes we processed.
A practical look at cybersecurity competition as repeatable training built from real-world events.
This SEI podcast episode frames the President's Cup as more than a cybersecurity contest. Its focus is practical engineering: taking real-world incidents, including supply chain attacks, and turning them into scenarios federal professionals can investigate, mitigate, and…
A sober, practical episode on turning secure-by-design principles into organizational and software-development habits.
The episode takes a broad warning about cyber risk and brings it down to the level of everyday software practice: how organizations can make security part of the work before anything reaches a customer.
SBOM comparability can turn on version strings and dependency choices that different tools, producers, and consumers handle differently.
SBOMs come through here as a practical way to understand software supply-chain risk, but the episode is most useful when it shows how fragile comparison can be. Matthew Bukovic of the SEI CERT Division speaks with Dr.
A measured review of why faster military AI acquisition still needs disciplined engineering and human review.
The episode looks at the pressure point between fast military software buying and the slower discipline that higher-risk AI work still demands.
A focused review of how LLMs and SAT solvers can automate parts of the Pointer Ownership Model for temporal memory safety.
Temporal memory safety is framed here as a software assurance problem with a real limit: bug hunting can expose known defects, but it cannot prove that unknown ones are absent.
A practical look at how MELT turns ML test and evaluation into a process teams can work with.
Machine learning test and evaluation sits at the center of this episode, and its real value is in making MELT feel usable at design time. Grace Lewis keeps the focus on deployment realities, while Alex Durr, Sebastiana Chavarria, and Kate Maffey turn concerns like CPU, memory,…
A grounded case for iterative delivery in modernization.
The SEI Podcast Series treats software modernization as an operating problem, not a slogan. Paul Nielsen and Matthew Bukovic spend much of the episode on the move away from years-long requirements studies and toward iterative delivery, and the references to Netflix, Amazon,…
Cloud flow logs are presented as a proactive monitoring habit, not a cleanup step after trouble starts.
The episode treats cloud flow logs as something teams should look at before an incident, not after one. It works best when it moves from the shared security model into the plain question of what to watch and how to begin collecting logs.
Long-form interviews on AI coding agents, infrastructure, and security, plus a recurring SED News roundup.
Founders and engineers on AI coding agents like Claude Code, and supply chain security.
Stack Overflow's Ryan Donovan interviews founders and engineers on AI agents, protocols, and dev tools.
Michael Kennedy interviews Python maintainers on packaging, security, web tools, and AI.
Michael Kennedy and Brian Okken run down the week's Python tooling, typing, and packaging news.
Matt Stratton interviews DevOps practitioners on security, platform engineering, and trusting AI-written code.
Matthew Bukovic interviews Dr.
An SEI podcast interview where DevOps engineer Vaughn Coates discusses the benefits of adopting the Rust programming language for mission-and-safety-critical systems.
This episode explores how cloud flow logs enhance cyber situational awareness in cloud infrastructure, featuring SEI experts Tim Schimel and Ikem Mokafo.
David Svoboda and Joseph Seibel discuss proposed updates to the SEI CERT secure coding standard, focusing on revising risk assessment metrics to better prioritize automated detection and repair.
Grace Lewis, principal researcher at the Software Engineering Institute and newly elected president of IEEE Computer Society for 2026, discusses her vision for advancing computer science through volunteer leadership, industry engagement, and emerging technology initiatives.
Tim Chick discusses key elements for designing secure systems, including the importance of addressing design defects, integrating abuse cases, managing open source risks, using SBOMs, and balancing security with user experience through secure-by-default practices.
Grace Lewis, a principal researcher at the Carnegie Mellon University Software Engineering Institute, frames the episode around container builds that should match but often do not because of timestamps, random numbers, and external dependencies.
The SEI Podcast Series episode "Improving Machine Learning Test and Evaluation with MLTE" brings together Grace Lewis, Sebastiana Chavarria, Alex Durr, and Army data scientist Kate Maffey to discuss a tool that started as a Carnegie Mellon University capstone project.
SEI’s Matthew Bukovic and cybersecurity engineer Dr.
The SEI Podcast Series episode on IDES centers on Austin Wisnant and Dan Costa explaining the Insider Incident Data Expression Standard, which the SEI released on GitHub alongside documentation and a JSON schema.
Greg Tuhill and Matthew Pekovic connect ransomware, critical infrastructure, and the January 2024 FBI warning about China exploiting security weaknesses in U.S.
A self-hosted LLM shows how a very ordinary-looking workflow can turn unsafe.
Mike Winter opens by introducing a report to Congress on creating a civilian cybersecurity reserve.
It opens on a serious wireless-security problem.
Matthew Bukovic, technical director of cyber risk and resilience in the CERT division at the Software Engineering Institute, speaks with Paul Nielsen, the SEI’s director and CEO and a former U.S.
Tim Chick opens the SEI podcast with two colleagues from the Applied Systems Group, Max Chudina and Sasank Vishlabhatla.
Tim Chick frames threat modeling as a cybersecurity way to think about software-intensive systems.
Matthew Bukovic opens by situating the SEI as a federally funded research and development center sponsored by the U.S.
This episode discusses a SEI study on the state of DevSecOps in the DOD, highlighting success stories like MEPCOM's transformation and key findings on leadership, culture, and process.
SEI researchers discuss deploying cloud-native technologies like Kubernetes on resource-constrained edge devices, covering challenges such as air-gapped environments, automation with tools like Harvester and Zarf, and security considerations including DevSecOps practices.
The finals bring the top 10 defensive, top 10 offensive, and top 5 teams to compete in person.
Matthew Bukovic opens with the 2025 Stanford Artificial Intelligence Index, Gartner’s trough of disillusionment, and an MIT report that says 95% of organizations using generative AI saw zero return on $30 to $40 billion in spending.
Linda Parker-Gates opens the conversation from the SEI's Washington, D.C.
An expert interview exploring how API security fits into zero trust implementations, covering vulnerabilities, monitoring strategies, and the growing role of machine learning in protecting application interfaces.
Matthew Bukovic interviews General Greg Tuhill, Director of CERT at SEI, about how the institute delivers cyber capabilities to the Department of Defense and beyond.
SEI researchers Katie Robinson and Violet Turi discuss their experiment using role-playing scenarios to uncover bias in large language models like ChatGPT.
Suzanne Miller and Bill Nichols focus on cybersecurity metrics, with Bill tying the topic to his SEI work in software engineering measurement and analysis.
Discussion of a newly identified UEFI vulnerability and the CIRC UEFI Parser tool for analyzing firmware vulnerabilities.
An interview with Lauren McIlvaney about the current AI threat landscape and the formation of an AI security incident response team at the SEI.
A discussion about API vulnerabilities and their impact on zero trust security, featuring a new engineer at the SEI.
Researchers discuss their collaboration with OpenAI to develop 14 recommendations for evaluating large language models for cybersecurity tasks.
A discussion on capability-based planning, its benefits and drawbacks, and how to implement it in software engineering contexts.
An interview discussing the deployment of DevSecOps practices to balance developer velocity and cybersecurity enforcement.
An interview with Tim Chick and Joseph Yankle about their work on a platform-independent model for DevSecOps.
Discussion on engineering AI systems with SecDevOps, covering challenges and strategies for organizations.
This episode introduces ModDevOps, an extension of DevSecOps that integrates model-based systems engineering practices, with guests discussing their work at the SEI.
Dr.