**Johnny Xmas** is a predominant personality in the information security community, most well known for his work on the TSA Master Key leaks between 2014 and 2018 (all presented at HOPE!). Currently working with the security engineering firm GRIMM as an AppSec consultant and trainer, he was previously the director of field engineering at the anti-bot vendor Kasada. Prior to that, he was the lead consultant on Uptake’s industrial cybersecurity platform. Johnny has spent many years in the field as a penetration tester, focusing heavily on both IT and physical security of financial and medical facilities, and has served in security engineering for global Fortune 500 retail corporations.