Signal vs Noise focused 160th DevClub.lv

DevClub.lv

Proving who you are online is harder than it looks.

Tallink Hotel Riga

Hi!Finding vulnerabilities is getting easier. Deciding which ones to fix first is getting harder. At our next DevClub.lv, three speakers look at AI in security from the attacker’s, the developer’s and the SOC analyst’s point of view.You are welcome to Signal vs Noise focused event on November 12, 18:30, at Tallink Hotel Riga – Elizabetes iela 24, Rīga. Please note that due to venue rules and our budget limits snacks and drinks will not be provided at this event. We kindly ask you to plan accordingly.

Agenda for "Signal vs Noise focused" 160th DevClub.lv:

<a href="https://www.linkedin.com/in/gvidob/" title="https://www.linkedin.com/in/gvidob/" target="_blank" data-msys-clicktrack="0" rel="nofollow noopener noreferrer">Gvido Bērziņš</a> from <a href="https://www.tet.lv/" title="https://www.tet.lv/" target="_blank" data-msys-clicktrack="0" rel="nofollow noopener noreferrer">Tet</a> will give a talk “The Blurring Line Between Coding and Hacking”.The line between software development and hacking is becoming increasingly blurred. Hackers are adopting the same tools, frameworks, and technologies as developers, but using them in different ways — adapting existing solutions, building custom tools, and automating tasks that once required extensive manual effort. In this session, I will share a pentester's perspective on how offensive security tooling is evolving. We'll explore how hackers approach software development, why custom tooling is becoming an essential part of security testing, and how AI agents are changing the way we research, develop, and automate security workflows. We'll also look at the emerging concept of hackbots - AI-powered agents capable of exploring applications, interacting with systems, identifying potential vulnerabilities, and automating parts of the security testing process. What happens when security tools stop being just tools and start making decisions on their own? Topics include custom security tooling, developer tools in offensive security, AI-assisted development, security automation, and autonomous vulnerability discovery.(Language: English)Tags: AppSec, Cybersecurity, Penetration Testing, Offensive Security, AI Agents, Security Automation, Hackbots, Developer ToolsGvido Bērziņš is a Senior Cybersecurity Engineer at Tet and an OSCP-certified penetration tester with experience in application security, offensive security and security tool development. His work focuses on identifying vulnerabilities in applications and systems, developing custom security testing solutions, and automating security research workflows. With a background in both software development and cybersecurity, he explores how emerging technologies, including AI-powered agents, are reshaping the way security professionals work.

<a href="https://github.com/lafriks" title="https://github.com/lafriks" target="_blank" data-msys-clicktrack="0" rel="nofollow noopener noreferrer">Lauris Bukšis</a> from <a href="https://dativa.lv/karjera/" title="https://dativa.lv/karjera/" target="_blank" data-msys-clicktrack="0" rel="nofollow noopener noreferrer">Dativa</a> will give a talk “Beyond CVE Alerts: Contextual Vulnerability Triage with Local SLMs”. Every dependency scanner gives the same answer: package X has CVE Y. On a real Latvian public-sector system (2,153 dependencies across Go, npm, and .NET), that meant 118 open vulnerabilities. CVSS describes the library, not how your code uses it. Together with researchers from Riga Technical University, we built a pipeline asking a narrower question: does this specific file use the vulnerable package, and how much does that matter? We catalog dependencies with Syft, match them to known CVEs, drop unaffected files via static import filters, and let a local SLM score remaining file-level risk (0–5) with written justification. A small ML model combines these scores with CVSS and retrains on analyst feedback—without any source code leaving the premises. I’ll share what worked, the engineering tradeoffs of swapping DeepSeek-R1-8B for Mistral 3B Instruct (4x smaller, 2.5x faster), what we haven't solved yet (evaluating accuracy across our 168-case test set), and how this mindset supports compliance like CRA and NIS2. (Language: English) Tags: software supply chain, dependency vulnerabilities, CVE triage, local LLM, small language models, static analysis, AppSec, CRA, NIS2 Lauris Bukšis is the CISO of Dativa with 25 years of hands-on experience at the company across software development, systems architecture, and security leadership. A builder at heart, he continuously tracks emerging tech to introduce modern tools, automation, and pragmatic, local-first security practices directly into engineering and development workflows.

<a href="https://www.linkedin.com/in/rolandsbirons/" title="https://www.linkedin.com/in/rolandsbirons/" target="_blank" data-msys-clicktrack="0" rel="nofollow noopener noreferrer">Rolands Bīrons</a> from <a href="https://br2sec.com/en/" title="https://br2sec.com/en/" target="_blank" data-msys-clicktrack="0" rel="nofollow noopener noreferrer">BR2SEC</a> will give a talk “Signal in the Logs: AI-Assisted Triage in an Open-Source SOC”. A SOC is only as good as the data it sees and the alerts its analysts can actually get through. Web servers write access logs, endpoint agents report file and process changes, and vulnerability scanners add CVE alerts on top. Most of it is noise, but the one request that matters is somewhere in there. In this session, I will look at a working SOC setup built on Wazuh, the open-source security platform. We'll start with the data: exploring which logs are worth collecting, whether web server logs are just noise and data bulk, and whether we actually need to parse everything. I'll also share my local LLM + Wazuh setup and demonstrate a custom Wazuh plugin I developed that uses AI to filter false positives and analyze alerts in place. We'll also look at how a SOC can become a single hub for overlooked security signals, such as dependency vulnerabilities and leaked credentials, using enki-guard as an example. While AI is powerful and can spot patterns faster — and sometimes better — than a human, a fully autonomous AI SOC isn't realistic in the near future. Many routine administrative tasks look suspicious to an LLM, and if you tune the model too aggressively to ignore that noise, you risk blinding it to real attacks. In modern security operations, data context and enrichment are essential — even for LLMs — raising the question: how do we feed AI the right context while remaining careful with sensitive data? Topics include log selection and noise reduction, open-source SOC architecture with Wazuh, custom AI plugins for alert triage, integrating external security signals, and safe data enrichment for local LLMs. (Language: English) Tags: SOC, Wazuh, Log Analysis, Alert Triage, False Positives, AI in Security Operations, Open Source Security, Threat Detection Rolands Bīrons is the CEO of BR2SEC and a certified penetration tester, auditor, and developer (OSCP+, CRTP, CISA, ISACA AAIA, CEH). Starting his career in software development and DevOps before moving into penetration testing, stress testing, and systems auditing, he brings over 15 years of hands-on experience across Linux, Windows, Active Directory, and diverse enterprise environments. His work focuses on offensive security, auditing complex infrastructures, and building custom security tooling — exploring how open-source platforms and AI can automate workflows and make everyday threat detection more effective.

<a href="https://ninebrains.eu/tech-leaders-forum/2026-11-riga/" title="https://ninebrains.eu/tech-leaders-forum/2026-11-riga/" target="_blank" data-msys-clicktrack="0" rel="nofollow noopener noreferrer">Tech Leaders Forum by Nine Brains</a> returns on November 24 in Riga! After very positive feedback from the first Forum in September: 5 real-world cases + 5 structured peer discussions for CTOs, VPs/Heads of Engineering and other senior technology decision-makers. Early bird €150 + VAT until November 15. <a href="https://ninebrains.eu/tech-leaders-forum/2026-11-riga/" title="https://ninebrains.eu/tech-leaders-forum/2026-11-riga/" target="_blank" data-msys-clicktrack="0" rel="nofollow noopener noreferrer">Learn more and apply</a>.

Videos from previous events you can find at our homepage and our YouTube channel. The best way to be informed about new videos is to <a href="https://www.youtube.com/c/devclubs" title="https://www.youtube.com/c/devclubs" target="_blank" data-msys-clicktrack="0" rel="nofollow noopener noreferrer">Subscribe to our YouTube channel</a>.

GoCardless is a global fintech building the world's bank payment network, processing over US$130B annually for 100,000+ businesses. Our teams also use AI and open banking to increase payment success and reduce fraud, creating complex engineering challenges at a massive scale. We’re solving problems that affect how money moves globally. Join us to build the future of payments! – <a href="https://job-boards.greenhouse.io/gocardless/jobs/7699256" title="https://job-boards.greenhouse.io/gocardless/jobs/7699256" target="_blank" data-msys-clicktrack="0" rel="nofollow noopener noreferrer">Data Analyst II</a> – <a href="https://job-boards.greenhouse.io/gocardless/jobs/8248832" title="https://job-boards.greenhouse.io/gocardless/jobs/8248832" target="_blank" data-msys-clicktrack="0" rel="nofollow noopener noreferrer">Director of Engineering</a> – <a href="https://job-boards.greenhouse.io/gocardless/jobs/8261497" title="https://job-boards.greenhouse.io/gocardless/jobs/8261497" target="_blank" data-msys-clicktrack="0" rel="nofollow noopener noreferrer">Engineering Manager II</a>

Com Tec Co (CTCo) is a global digital services provider with 600+ experts driving digital transformation across industries. Why join CTCo? – Global projects – Growth‑focused culture – Shape the digital future Stay tuned—your next big opportunity could be coming soon! – <a href="https://www.ctco.eu/vacancies/senior-learning-development-specialist" title="https://www.ctco.eu/vacancies/senior-learning-development-specialist" target="_blank" data-msys-clicktrack="0" rel="nofollow noopener noreferrer">Senior Learning &amp; Development Specialist</a> – <a href="https://www.ctco.eu/vacancies/java-developer" title="https://www.ctco.eu/vacancies/java-developer" target="_blank" data-msys-clicktrack="0" rel="nofollow noopener noreferrer">Java Developer</a>

At Dativa, we deliver secure and scalable IT solutions trusted by governments and enterprises, backed by deep expertise in custom software and e-services development. <a href="https://dativa.lv/karjera/" title="https://dativa.lv/karjera/" target="_blank" data-msys-clicktrack="0" rel="nofollow noopener noreferrer">Join us</a>!

Trading since 2017, Gravity Team is one of the leading crypto market makers and liquidity providers, with cumulative trading volumes to date in excess of $400 billion. Join our community of innovators, problem solvers and owners who apply scientific discovery techniques to make crypto markets a better place for everyone. – <a href="https://careers.gravityteam.co/jobs/8614450-hft-network-engineer" title="https://careers.gravityteam.co/jobs/8614450-hft-network-engineer" target="_blank" data-msys-clicktrack="0" rel="nofollow noopener noreferrer">HFT Network Engineer</a>

Levelpath is on a bold mission to revolutionize procurement software—and make it delightful. Founded in 2022, we’re a AI-powered platform tackling real challenges in the $11.5B (and growing) market. Our engineering team builds cutting-edge solutions that unify workflows, data, and automation for a seamless business experience. Backed by top Silicon Valley VCs and a proven founding team, we’re hiring developers who thrive on solving hard problems and pushing boundaries to transform the enterprise. – <a href="https://www.levelpath.com/company?ashby_jid=b681acc5-f32c-4356-9c62-8230cf2b92af" title="https://www.levelpath.com/company?ashby_jid=b681acc5-f32c-4356-9c62-8230cf2b92af" target="_blank" data-msys-clicktrack="0" rel="nofollow noopener noreferrer">Software Engineer / Agentic Workflows / Full-stack</a>

Thanks to our sponsors for supporting DevClub.lv events:

Signal vs Noise focused 160th DevClub.lv

Good to know

Location

Tallink Hotel Riga

How do you want to get there?

More events from DevClub.lv

Discover more events from DevClub.lv, from Science & Tech to other experiences you might love.

Still looking for the right event?

Explore all events in Rīga and filter by date, category, and more to find the perfect fit.

Signal vs Noise focused 160th DevClub.lv

Good to know

Location

Tallink Hotel Riga

How do you want to get there?

More events from DevClub.lv

Discover more events from DevClub.lv, from Science & Tech to other experiences you might love.

You might also like...

Browse more events with different dates, prices, and formats to find your next great experience.

Still looking for the right event?

Explore all events in Rīga and filter by date, category, and more to find the perfect fit.