I’m David Galiata, a security engineer in the Bay Area.
I write about securing cloud and AI systems and building security that accelerates innovation.
I'm a
Featured
My Approach to AI in 2026
How I'm approaching AI in 2026 and beyond.
Collaboration, Communication, and Culture in Cybersecurity
How building trust, communication, and shared ownership transforms security from a technical task into an organizational culture.
Beyond Integrating AI- A Scoping Framework for Security Engineers
From Consumer Apps to Custom Models: A Security Framework for AI Integration
Recent Posts
All Posts- 9 min read
The patterns behind infrastructure as code, and how Terraform implements them
The handful of problems every IaC tool has to solve, the way Terraform solves each one, and the newer features worth knowing about.
- 5 min read
GitHub Actions vs GitLab CI vs CircleCI: Jobs, Steps, and Stages Explained
GitHub Actions, GitLab CI, and CircleCI use different names for the same ideas. Here's the shared model underneath, and how to translate between them.
- 5 min read
Building MSP Insights: Learning Full-Stack Dev by Securing an LLM Feature
A hands-on project for learning React, FastAPI, and how to guard an LLM feature against prompt injection.
- 4 min read
Workflow or Agent? Choosing the Right AI Architecture
A practical breakdown of the difference between AI workflows and agents, with examples from IT consulting.