Tune in for calm, clear, and engaging essentials that help you stay secure in a digital world.

This year, Secure9 invites you to take a mindful approach to cybersecurity — one that replaces noise with awareness, and panic with intention.

 

From insightful speakers to interactive activities, we’ll explore how small shifts in focus can strengthen your security defenses. And of course, we wrap it all up with a hands-on challenge at the Capture the Flag competition.

 

Every minute of Secure9 will be dedicated to helping us safeguard ourselves, our services, and our customers — one breath at a time. 

Inhale. Exhale. Secure.

Join our sessions!

Matthias Held

Go hack yourself! Why it is important to think like a hacker.

29th September, 15:00 – 16:00 CET

The best defence is a strong offence! Do you want to code more securely? Then think like a hacker! Whether you’re a developer or security specialist, this talk shows how to prevent and mitigate threats and protect your applications and users. You’ll see what real-world attacks look like, explore case studies on common pitfalls, and learn how to build a culture of security awareness. Secure coding will become a natural part of your development process. 

Ihor Kozlov

Jailbreaking Large Language Models Across Their Lifecycle

30th September, 15:00 – 15:35 CET

Large Language Models (LLMs) can be compromised long before they reach end users. From poisoned training data and malicious fine-tuning to real-time prompt injections, attackers have multiple chances to “jailbreak” AI systems and bypass safeguards. This talk explores vulnerabilities across the full LLM lifecycle — training, fine-tuning, and inference. It also highlights defense strategies, including how AWS and Azure tools can help build more resilient GenAI systems. 

Igor Jankovic

Prompt Injection: The Hidden Threat in AI Conversations

1st October, 15:00-15:35 CET

Large Language Models like ChatGPT and Claude are used in applications from summarizing documents, to writing code, to automating business processes. But with new power comes new risks, and one of the most important is Prompt Injection. This is a way of tricking an AI system into doing something it wasn’t meant to — ignoring instructions, leaking data, or executing malicious actions. In this talk, we’ll cover what prompt injection is, why it matters, and how to defend against it. 

Alin George Costea

Hope for the best but prepare for the worst - Threat Modeling in Software Systems

2nd October, 15:00-15:35 CET

You wouldn’t leave your new car parked with the keys in the ignition on a dubious back alley, right? We constantly think about risks in daily life and take steps to avoid them. Why not do the same for the software we create? This talk draws parallels between everyday risk awareness and secure coding. 

Speaker 1

To be announced

October 7, 2025, 16:00 – 17:00 CET

Speaker 2

To be announced

October 7, 2025, 16:00 – 17:00 CET

Tanya Janca

Shifting Security Everywhere

October 7, 2025, 16:00 – 17:00 CET

As a software developer, you may feel that the meaning of ‘shift left’ is lost. It was supposed to mean ‘starting security as early as possible in the SDLC’, but was transformed into “buy this product, put it in your CI/CD, then your apps will be secure”. But we can’t just throw a bunch of tools into a CI/CD and call it a day. With this in mind, let’s focus on comprehensive programs, developer buy-in, and making security work for the entire business, by shifting security everywhere.

Tanya Janca

Shifting Security Everywhere

October 7, 2025, 16:00 – 17:00 CET

As a software developer, you may feel that the meaning of ‘shift left’ is lost. It was supposed to mean ‘starting security as early as possible in the SDLC’, but was transformed into “buy this product, put it in your CI/CD, then your apps will be secure”. But we can’t just throw a bunch of tools into a CI/CD and call it a day. With this in mind, let’s focus on comprehensive programs, developer buy-in, and making security work for the entire business, by shifting security everywhere.

Register to Attend Secure9

Secure9 is back — and you’re invited!

Join us for a day of inspiring cybersecurity talks, practical insights, and expert knowledge from top tech professionals at Levi9.

 

Whether you’re a developer, engineer, student, or tech enthusiast — there’s something here for you.

Capture The Flag 2025

CTF9 is back to test your hacking skills like never before. The Capture the Flag Competition (CTF9) is where real Levi9 hackers thrive. Gather your team or go solo and join us on October 3, 2025 to demonstrate your ability.

 

Top 3 teams will walk away with amazing prizes. 

 

We encourage you to collaborate with customers and alumni on your team and make this year CTF9 an event to remember. Mark that at least one team member of a team has to be a levi niner!

Meet & Greet the Team

They are the masterminds behind the Secure9 tradition. 

Milic Vuletic

Cyber Security Lead

Alexandru Vornicu

ISO

Serhii Rozumenko

ISO

Vladislava Stanivukovic

ISO

Branislav Bozejac

Cyber Security Specialist

Julija Gojković 

Employer Branding Expert

Veljko Karadzic

ISO

Tanya van Witzenburg

HQ ISO

Miloš Milovanović

Cyber Security Specialist

Facts & Figures

The overall impact

0
editions
0
sessions
0 +
participants

2024 edition in numbers

0
presentations and CTF 
0
minutes of insights
0
participants

Secure9 2024 aftermovie

Matthias Held

Technical Program Manager

Matthias is a cybersecurity solutions architect, CISO, hacker and developer who specializes in building robust systems and rigorously testing them to identify and fix vulnerabilities.  

 

He currently serves as a Technical Program Manager at Bugcrowd, one of the largest cybersecurity companies worldwide. Behind him are decades of experience as a CISO, CTO, Developer, Sysadmin and Product Manager in various companies where he collaborated with clients such as Nike, Bosch, National Geographic, Miele, Ford, Epic Games, and more.  

 

Matthias has been sharing his insights in security in an engaging and fun way as a public speaker at TEDx, Chaos Communication Congress (CCC), WordCamps, code.talks, MRC, CyberSecCon, and other events. 

Ihor Kozlov

Data & ML Engineer

Ihor is a Data & ML Engineer specializing in cloud technologies, big data, and machine learning. Currently, he focuses on developing Generative AI solutions—building applications that enhance customer experience, automate processes, and deliver innovative outcomes. 

Igor Jankovic

Tech Lead

Igor is a software developer with more than 10 years of experience building cloud and web applications, and he’s been with Levi9 for the past 6 years. 

 

Outside of work, he enjoys playing Capture The Flag competitions, which is how he first got into security challenges like the he’ll explore in his topic. 

 

In the session, he wants to take you beyond the buzzword and show you what prompt injection really is — and why it’s a risk we all need to understand.

Alin George Costea

Software Developer & Architect

Software Developer & Architect, passionate about learning, avid supporter of Free Software and Linux, amateur astrophotographer, curious about anything, really. 

Add to calendar

Tanya Janca

Application Security Engineer 

After being Levi9’s Chief Executive for 9 years, Paul is member of the board as a non-executive, since 2018. He has over 35 years of experience in the field of IT. 

 

He started his career in 1987 as a management consultant and before joining Levi9 he spent 23 years in one of the largest ITC provider in Europe. Where he held various management positions until 2003 when he became a Chief Executive and member of the Executive Committee. Paul has two grown up sons and lives in Castricum, the Netherlands.