Product Security · Security Architecture · AI Security

Tomer Shachar

Chief Product Security Officer (CPSO)

Real-world cybersecurity expertise across architecture, product and AI, backed by 70 granted patents in security, firmware, cloud and more.

Granted patents
70
Dell Technologies
Distinguished Member of Technical Staff

01 / About

Real-world cyber expertise.
Proven innovation.

I build security the way products actually get built: from the problem customers feel, through architecture and engineering, to something teams can ship and operate.

Across enterprise and cloud environments I have owned product security and security architecture end to end: threat modeling and secure design, Secure SDLC gates, cloud and AI agent security, and the risk decisions that R&D and leadership need to move. That span comes from engineering roots. I know how systems are designed, coded, integrated and run, so the controls I define fit the product rather than sitting beside it.

The same drive shows up as invention I actually shipped into platforms. My 70 granted patents span security, AI, cloud and infrastructure, including deep work on hardware root of trust, firmware and BIOS protection and recovery, and system hardening. I also served as a judge on three Dell patent committees (Cybersecurity, Infrastructure and Cloud). Today I own security capabilities and AI agent security across a large product portfolio, and served as Chief Product Security Officer for the division.

  • Security Architecture
  • Threat Modeling
  • Secure SDLC
  • AI Agent Security
  • Cloud Security
  • IAM
  • EU AI Act · CRA · ISO 42001

02 / Expertise

Where I add the most value

Hands-on depth in architecture and threat modeling, combined with the product and leadership side of security.

Product Security

Security requirements, release gates and risk decisions across a product portfolio, translating technical risk into clear decisions for R&D and executive leadership.

  • Release gates
  • Risk to decisions
  • Portfolio

Security Architecture & Secure SDLC

Systematic threat modeling and secure design review, from STRIDE and attack trees to the mitigations in product design, plus security scanning as a standard SDLC gate, CI/CD and supply chain security.

  • STRIDE
  • Secure Design Review
  • DevSecOps
  • OWASP
  • MITRE

Cloud & AI Agent Security

Defining what each AI agent may access and the credentials it runs with, alongside cloud security across AWS, GCP, Azure and hybrid environments.

  • MCP & Tool-Calling
  • RAG
  • OWASP LLM Top 10

Governance & Regulatory Readiness

Translating the EU AI Act, CRA and ISO 42001 into concrete product requirements, and identifying where product investment is needed.

  • EU AI Act
  • CRA
  • ISO 42001
  • NIST CSF

Leadership

Led development teams and a team of architects, with mentoring across R&D and product, while driving cross-functional security decisions with executives.

  • Team leadership
  • Mentoring
  • Cross-functional

Innovation & Patents

Inventor of 70 granted patents and a judge on three Dell patent committees, turning emerging security needs into protected technology.

  • 70 granted
  • Patent committees

03 / Patents & Innovation

Patents and innovation

70

granted patents

across security, AI, cloud and infrastructure

  • 2022Recognized for significant contribution to innovation at Dell Technologies
  • DomainsPatents across 5 domains: security, AI/ML, cloud, storage and infrastructure
  • JudgeThree Dell patent committees: Cybersecurity, Infrastructure and Cloud

Selected patents

US 12,265,623 B2Firmware

Firmware protection using multi-chip storage of firmware image

Protects firmware by encrypting it, splitting it across multiple recovery chips, and requiring pieces from at least two chips before it can be rebuilt.

Google Patents
US 11,487,862 B2Security

BIOS protection using multi-factor authentication based on digital identity values

Protects BIOS access with multi-factor authentication that checks a digital identity token against an MFA chip on the device.

Google Patents
US 12,541,595 B2Detection

Ransomware detection via detecting system calls pattern in encryption phase

Detects ransomware by scoring system-call patterns during an encryption phase and triggering protection when a process crosses a threshold.

Google Patents
US 11,853,417 B2Infrastructure

Hardware device integrity validation using platform configuration values

Validates hardware integrity by comparing live platform configuration values to a trusted table and triggering remediation when they do not match.

Google Patents
US 12,238,225 B2Cloud

Unauthorized communication detection in hybrid cloud

Detects unauthorized communication in a hybrid cloud environment.

Google Patents
US 12,189,997 B2Storage

Host agent-assisted detection of malicious attack on storage array

Uses a host agent to help detect malicious attacks against a storage array.

Google Patents

View all 70 on Google Patents

04 / Insights

Notes on security architecture

A weekly recap, "What happened in Cybersecurity this week", plus shorter takes on incidents through an architecture lens.

Cover image for the weekly cybersecurity recap

What happened in Cybersecurity this week (Oct 30 to Nov 4)

A fake job interview behind a record crypto theft, AI-driven attacks named in official breach disclosures, and why "rotate everything" is the only answer after a platform breach.

  • Weekly
  • AI Security
  • Supply Chain

All insights RSS feed

05 / Experience

From code
to architecture
to product.

    1. Jul 2024 - Present

      Chief Product Security Officer (CPSO) for the Product division

      Amdocs

      Owns product security for the division: security requirements, architecture and release gates across the portfolio. Technical product owner for security capabilities on a cloud-native microservices platform underlying 7 product suites, including AI agent security requirements and release gates.

    1. 2022 - 2024

      Distinguished Member of Technical Staff, Cybersecurity Architecture & Innovation

      Dell Technologies

      Researched and shaped future cybersecurity capabilities for Dell infrastructure, storage and cloud products, protecting the resulting inventions through patents. Set secure-by-design direction and security architecture across those product lines, led threat modeling for major products, and judged on three patent committees.

    2. 2020 - 2022

      Chief Solution & Security Architect, CloudIQ Cybersecurity

      Dell Technologies

      Founded the cybersecurity domain from zero and owned its end-to-end architecture, a microservices platform with more than 50 integration points. Managed a team of architects.

    3. 2016 - 2020

      Team Leader & Solution Architect, Cybersecurity Solutions

      Dell Technologies

      Led developers and QA as the team's architect, delivering cybersecurity products for hybrid and multi-cloud environments on AWS, GCP and Azure.

    1. 2015 - 2016

      Development Team Lead

      Hachshara Insurance

      Led a development team through legacy modernization in a regulated insurance environment.

    1. 2007 - 2015

      BI & Applications Developer

      Clalit Health Services

      Built BI solutions and led critical data migrations while keeping systems continuously available.

06 / Contact

Let's talk.

Always happy to connect about product security, security architecture and AI security, including the right next challenge.