Closing the Loop: How Human Feedback Improves Security Operations Over Time

Learn how feedback-driven security ops turn everyday actions into smarter detection, adaptive automation, and continuous resilience.

Event Synopsis

As organizations increasingly adopt AI and automation in security operations, the real opportunity lies not just in processing more data, but in learning from every decision made across the security lifecycle. This session explores how human feedback can be used to continuously improve detection, response, and operational effectiveness.

The presentation will look at how day-to-day actions—such as incident handling, rule tuning, workflow adjustments, and investigation outcomes—can be turned into structured feedback that strengthens detection logic, automation playbooks, prompt and skill libraries, and overall visibility.

It will also cover the practical challenges of building effective feedback loops, including data quality, avoiding poor reinforcement, model drift, and maintaining trust in automated systems. The session will provide a pragmatic view of how organizations can move beyond static controls and build security operations that continuously adapt and improve over time.

Meet our Speaker: David Vassallo

David Vassallo is Co-Founder and CTO of CyberSift, where he leads the development of AI-driven detection and response technologies for modern security operations. With an MSc in Computer Science from University of Liverpool and deep expertise in threat intelligence, vulnerability research, and security automation, David works at the intersection of advanced AI and proactive cyber defense.

A recognized voice in the cybersecurity community, he regularly speaks at industry events and contributes to open-source initiatives. His work focuses on helping organizations strengthen their security posture through intelligent automation, scalable security architectures, and collective defense strategies designed to address an increasingly complex threat landscape.