Jack Naglieri
San Francisco, California, United States
10K followers
500+ connections
About
Jack is a security practitioner-turned-entrepreneur and the founder of Panther, the AI SOC platform for engineering-minded security teams. Panther combines a security data lake, detection-as-code, and AI agents to close the loop between signal and resolution — replacing the low-value alerts, punishing costs, and blind spots that defined the previous generation of SIEM. The company raised $140M from Coatue, Lightspeed, and S28 Capital and was adopted by companies such as Coinbase, Docker, and Plaid before being acquired by Databricks in June 2026.
Jack's career began in the SOC as an incident responder at Yahoo, where the scale of the monitoring problem pushed him into software engineering and DevOps. At Airbnb, he led the development of StreamAlert, an open-source serverless framework that let security teams analyze logs in Python. He founded Panther to bring that architecture to the enterprise and led it for eight years through the shift from detection engineering to agentic security operations.
He also hosts Detection at Scale (detectionatscale.com), a podcast and newsletter on AI-powered security operations, where he talks with the practitioners and CISOs building the next generation of the SOC.
Articles by Jack
-
What 15 Security Leaders Taught Me About AI in 2025
What 15 Security Leaders Taught Me About AI in 2025
Cybersecurity promotes paranoia by design, and for good reason. Teams operate under the assumption that breaches are…
10 Comments -
Why Panther Chose Snowflake
Why Panther Chose Snowflake
Throughout my career as a security engineer at both Yahoo and Airbnb, the ability to effectively detect and respond to…
-
How Detection And Response Has Evolved And Where It’s Headed Next
How Detection And Response Has Evolved And Where It’s Headed Next
You can find the original article published on Forbes.com here.
-
Panther v1.0: Cloud-Native SIEM for Modern Security Teams
Panther v1.0: Cloud-Native SIEM for Modern Security Teams
Powering secure, scalable, and open source detection and response initiatives for cloud-first organizations We’re…
1 Comment
Activity
10K followers
-
Jack Naglieri reposted thisJack Naglieri reposted this🚀 Databricks + Panther is officially closed! Cybersecurity is now a data + AI challenge. By pairing Panther’s SOC workflows and detections-as-code with Lakewatch, we're giving security teams petabyte-scale data retention, automated AI triage, and real-time threat hunting on an open security lakehouse. Heading to Black Hat this week? Visit our booth at #5106 and #2167 to see live demos and meet the team! 👉 Check out the blog post for all the details: https://lnkd.in/e_WuufPk Andrew K. Jack Naglieri Dave HerraldDatabricks Completes Acquisition of Panther: Accelerating the Security Lakehouse EraDatabricks Completes Acquisition of Panther: Accelerating the Security Lakehouse Era
-
Jack Naglieri reposted thisJack Naglieri reposted thisThe SIEM/SOC is one of the most interesting areas in security right now — and I couldn't be more excited about this session at our Decibel Partners Game Day at Black Hat. "SIEM Under Siege" brings together some of the leading experts in detection engineering, log management, threat hunting, and alert investigation: Zack Allen of Datadog, who most of you know from Detection Engineering Weekly, will moderate a lively debate between my good friends Damien Lewke, CEO & founder of Nebulock, and Jack Naglieri, CEO & founder of Panther, recently acquired by Databricks. Is the SIEM under siege? Is a real inflection point coming to log management? How are security operations changing in the age of AI? If yesterday's OpenAI / Hugging Face incident — an AI agent breaking out of its eval environment and compromising another company's infrastructure — tells us anything, it's that these questions aren't hypothetical anymore. 🎙️ SIEM Under Siege 🗓️ August 4 📍 Decibel Game Day during Black Hat Las Vegas Registration link in the comments. Come join us for the SIEM showdown!
-
Jack Naglieri reposted thisJack Naglieri reposted thisReynold Xin, Databricks Co-founder and Chief Architect and Jack Naglieri, Founder and CEO of Panther took the stage at #DataAISummit to discuss security built for the agentic era. Panther delivers what legacy SIEMs can't: AI SOC agents that triage and investigate every alert, and broad data source coverage that captures the full spectrum of security telemetry.
-
Jack Naglieri reposted thisJack Naglieri reposted thisWe’re excited to announce that we have agreed to acquire Panther, a next-generation AI SOC platform. Panther delivers what legacy SIEMs can't: AI SOC agents that triage and investigate every alert, and broad data source coverage across the full spectrum of security telemetry. Panther accelerates our vision for agentic security operations. Trusted by leading security teams — including Anthropic — Panther has proven it can defend the most demanding, AI-native environments. Panther marks our third security acquisition as we double down to help organizations defend against increasingly sophisticated AI-driven attackers. Together, we’ll deliver agentic detection and response workflows on an open security lakehouse. This is security built for the agentic era. https://lnkd.in/g52uSUG5
-
Jack Naglieri reposted thisJack Naglieri reposted thisCloud, data, and AI have reshaped how modern companies build. Security teams now face the other side of that transformation: more data, wider attack surfaces, faster-moving threats, and rising expectations for response time. Today, Databricks announced its intent to acquire Panther, a leading AI SOC platform, to advance its security lakehouse vision. Since partnering with Panther in their Series B in 2021, we have watched Jack Naglieri and the team reimagine what security infrastructure looks like when it is built for scale, context, and action. We first met Jack when he was leading the StreamAlert open source project at Airbnb, building internal tooling to solve what legacy SIEM products could not: the scale, cost, and complexity of cloud-native environments. That conviction became Panther—a cloud-native platform combining a security data lake, more than 100 integrations, detection-as-code, and agentic SOC workflows that help teams automate triage and investigation. The security gap today is not only a detection gap. It is a data and workflow gap. Many organizations analyze only a fraction of their security data, and even when alerts surface, teams often lack the context and automation to respond in time. As a long-term partner to Databricks, we have seen the company help define the modern data and AI stack at enterprise scale. Through the acquisition of Panther, we believe Databricks can bring that same foundation to security, helping organizations unify security data, detect more threats, investigate every alert, and give defenders stronger footing in the AI era. https://lnkd.in/gDW7hb4Q Will Griffith | Murali Joshi | Sruthi Ramaswami | Ryan Murakawa | Joe Fahn *For educational purposes for company founders and executives. This is not investment advice or an offer to invest. Refer to Outreach Disclaimer link in profile.
-
Jack Naglieri reposted thisJack Naglieri reposted thisWe’re excited to announce that we have agreed to acquire Panther, a next-generation AI SOC platform. Panther delivers what legacy SIEMs can't: AI SOC agents that triage and investigate every alert, and broad data source coverage across the full spectrum of security telemetry. Panther accelerates our vision for agentic security operations. Trusted by leading security teams — including Anthropic — Panther has proven it can defend the most demanding, AI-native environments. Panther marks our third security acquisition as we double down to help organizations defend against increasingly sophisticated AI-driven attackers. Together, we’ll deliver agentic detection and response workflows on an open security lakehouse. This is security built for the agentic era. https://lnkd.in/g52uSUG5
-
Jack Naglieri posted thisI'm excited to announce that Panther has entered into an agreement to join Databricks. This is an incredible milestone and a moment I'm deeply proud of. Since 2018, we've had the opportunity to support and learn from the world’s most innovative security teams. Together, we pushed security operations forward with detection-as-code to agentic workflows across investigation and response. As AI transforms how security teams operate, it’s clear the future of security will be built on an open foundation of data and intelligence. Databricks has pioneered that foundation, and we're excited to join them in shaping the future of the security lakehouse. To our customers, investors, and every Pantherino: thank you. Your ownership, support, and hard work made this possible. Today we celebrate what we've built, and look forward to an exciting new chapter together with Databricks.
-
Jack Naglieri shared thisThis video from Anthropic perfectly represents the new shape of the SOC, where agents accelerate detection and response workflows. Agents perform best when they can see internal company knowledge, multiple datasets, and broad security/IT tooling. That brings organizational context alongside the event logs, giving us the business-level justification for the signals we create in the SOC. As the interface to security workflows becomes prompt-based, there's real potential to scale who can collaborate on security and the volume of signals we monitor. Anthropic's security team recently shared a demo of what this looks like in practice. They use their system, CLUE, to orchestrate investigation and remediation, which gathers context from Panther, VirusTotal, and internal sources to assess risk and take next steps. Those findings close the loop, improving their overall security posture and remediating issues that surface along the way. The future is agentic! Check it out: https://lnkd.in/gGD9a_-4
-
Jack Naglieri reposted thisJack Naglieri reposted thisTODAY I'm chatting about how AI has changed the Security Operations Center -- with some case study stories and show-and-tell demos for threat hunting, triage and more -- with Jack Naglieri and Panther! 1:00pm ET, I hope you tune in :) https://lnkd.in/eF38baWJ
-
Jack Naglieri liked thisJack Naglieri liked thiswalk into the Lyft San Francisco office on a random Tuesday afternoon and see this book on the table. The kids are gonna be alright. #measureanything #cybersecurity #risk #greenbook Richard Seiersen
-
Jack Naglieri liked thisJack Naglieri liked thisHere it is — the full recap of our Game Day event at Hacker Summer Camp! Thanks to everyone who made it our best one yet. Edward Wu David McGuire Andrew Peterson Ashish Rajan 🤴🏾🧔🏾♂️ Zack Allen Jack Naglieri Damien Lewke Kevin Mandia Rob Joyce Casey Ellis Jonathan Cran Zakir Durumeric Elias Manousos Brandon Dixon 🇺🇸 Josh Kamdjou Daniel Miessler Decibel Partners Jon Sakoda Stacey Wueste
-
Jack Naglieri liked thisJack Naglieri liked thisThat's a wrap on Black Hat 2026 🎩 The conversations this week reinforced our belief that the future of agentic security has to be open: open frameworks for securing AI, open data to help defend against evolving threats, and an open, governed foundation for security operations. And as a founding member of the Open Secure AI Alliance, we're excited to keep advancing that vision through open research and continued innovation in Lakewatch — our open security lakehouse. Thanks to everyone who stopped by to explore what's next!
-
Jack Naglieri liked thisJack Naglieri liked thisWhat a difference a few years makes! Stop by and say hello 😎
-
Jack Naglieri liked thisJack Naglieri liked thisCareer Milestone Complete: Keynote a conference Honored to open up the day at Blackhat Innovators and Investors Summit. Also flattered to receive positive feedback on slides and content. I spent a lot of Sundays cooking tokens and refactoring the talk track, and I’m glad that talk about the impending The Velocity Era lent itself to more discussions throughout the day.
-
Jack Naglieri liked thisJack Naglieri liked thisSo many great conversations came out of yesterday’s Decibel Partners Game Day here at Black Hat, but one of the most important centered on the evolution of the SIEM. We brought together some of the leading experts in security to debate where the category is headed in an ESPN-style “hot take” session featuring: Zack Allen (Datadog and founder of Detection Engineering Weekly) Damien Lewke (Founder & CEO of Nebulock) Jack Naglieri (Founder & CEO of Panther, a Databricks company)
-
Jack Naglieri liked thisJack Naglieri liked thisI’m excited to share that I’ve joined Uber as Chief Information Security Officer. What drew me here is simple: very few companies are responsible for real people moving through the real world at Uber’s scale, every minute of every day. Security at many companies protects data. At Uber, it also protects trips, riders, drivers, and couriers; real people in motion. This is an important responsibility that I’m excited to take on. What I’ve already seen at Uber is a team deeply committed to rigor, innovation, and creating real-world impact for the millions of people that we serve every day. I’m grateful to Praveen Neppalli Naga for this opportunity and excited to work alongside such an exceptional team. Looking forward to the ride ahead!
Experience
Education
Licenses & Certifications
Volunteer Experience
-
Food Preparer
SF-Marin Food Bank
- 1 month
Poverty Alleviation
During my first week at Airbnb, my bootcamp class weighed and packed food for families and children in poverty.
-
Painter
Bayview Opera House
- 1 month
Arts and Culture
During the Global Week of Good at Airbnb, all employees volunteered together around the world for various organizations. I had the opportunity to work at the Bayview Opera House in San Francisco, where I worked on renovating a room in an art gallery for K-12 students who had art removed from their curriculum due to budgetary constraints.
Projects
-
StreamAlert
-
See projectStreamAlert is a serverless, realtime data analysis framework which empowers you to ingest, analyze, and alert on data from any environment, using datasources and alerting logic you define.
Languages
-
English
Native or bilingual proficiency
Other similar profiles
Explore more posts
-
Tim Bertrand
Multi-cloud scale needs an entirely different approach to connectivity. Relying on sidecar-heavy setups to bridge Kubernetes deployments and legacy data centers introduces unnecessary latency and management overhead. The "mesh tax" is real, but it is no longer a requirement for enterprise security and routing. True scale requires centralized orchestration. Universal Mesh replaces complex sidecar fleets with strategic Edge Gateways. It provides a single, unified layer to seamlessly connect modern and legacy environments without the performance penalty. Jakub Suchy and Ron Northcutt are hosting a live session to demonstrate this architecture in action. Join them as they cover how to dynamically route around overlapping IP conflicts, unify your infrastructure, and eliminate the mesh tax from your operations. Sign up here: https://lnkd.in/e2uRT5Rt HAProxy Technologies
-
Jonathon Klem
I spent years saying I knew AWS, and to be fair, I kind of did. EC2, RDS, S3, SES, Route53. Solid, reliable, familiar. They map cleanly to the way most of us already think about servers and databases. The wake up call came when I finally forced myself to build real workflows using SQS, SNS, Lambda, API Gateway, and DynamoDB. Not tutorials. Not demos. Actual production problems. That shift changed how I think about systems. Decoupling stopped being a buzzword. Failure stopped being an edge case. Scalability stopped being something I had to engineer manually. I realized I had been using AWS like a nicer data center, not like a platform. If you are a developer who feels comfortable in AWS but mostly lives in EC2 and RDS, this might resonate. There is a whole other mental model waiting once you lean into queues, events, and serverless patterns. Wrote more about it here if you are curious https://lnkd.in/gGjVJnpX Would love to hear if others had a similar moment where things finally clicked.
6 Comments -
Galit Lubetzky Sharon
“Who approved this agent?” AI agents are reshaping how work gets done across the enterprise. They schedule meetings, trigger workflows, access sensitive data, and can take action across systems. Productivity is accelerating, but so is the security risk. One of the most concerning issues for CISOs and security leaders is that shared organizational agents are becoming authorization bypass paths. A user who is not authorized to access certain data or perform specific actions directly may still be able to do so by operating a shared AI agent that has broader permissions. Because the agent acts under its own authorization, not the user’s, these actions appear legitimate to security systems. As a result, the user effectively gains capabilities beyond their own permissions, and traditional controls fail to detect or flag the activity. In my latest article in The Hacker News I break down this challenge. I'd love to hear how other pros in the cybersecurity world are approaching AI agent access and oversight. Link in the comments 👇 #AIsecurity #AIrisks #AIagents #agenticAI #AIagentsecurity
6 Comments
Explore top content on LinkedIn
Find curated posts and insights for relevant topics all in one place.
View top content