About me
Marco Morana is the Field CISO at Avocado Systems Inc., specializing in threat modeling automation and Zero Trust Architecture for financial services. With over 15 years of leadership experience, he has held senior security roles at JP Morgan Chase and Citi, securing financial applications, digital assets, and decentralized platforms. A recognized expert in threat modeling and application security, Marco co-authored the PASTA Process for Attack Simulation and Threat Analysis (PASTA) methodology, a risk-centric approach to application security risk management. He mentors security teams, contributes to OWASP projects, and advises on enterprise security architecture, cloud security, security by design, and DevSecOps. His focus is on developing attack-resilient applications and safeguarding emerging technologies such as blockchain and AI.
