Christian Espinosa is the Founder and CEO of Blue Goat Cyber, a cybersecurity firm focused on medical device manufacturers and FDA premarket and postmarket cybersecurity. A U.S. Air Force veteran, Christian has spent decades at the intersection of cybersecurity, critical infrastructure, and regulated industries. He founded and exited Alpine Security before launching Blue Goat Cyber in 2022 with a mission to help device makers build security in from the start. Christian is a 24x Ironman, 2x best-selling author (The Smartest Person in the Room and The In-Between), and a frequent keynote speaker on cybersecurity leadership and emotional intelligence in technical teams. He hosts The Med Device Cyber Podcast to share frontline lessons on FDA submissions, threat modeling, SBOMs, and the engineering decisions that keep patients safe.
Areas of Expertise
FDA Premarket CybersecurityThreat ModelingRisk ManagementCybersecurity LeadershipISO 14971Secure SDLC
Topics Christian covers
FDA Premarket Cybersecurity
Episodes on premarket cybersecurity submissions, the FDA 2023 Refuse to Accept policy, and what the agency actually expects in 510(k), De Novo, and PMA filings.
SBOM Management
Software Bills of Materials for medical devices: generation, monitoring, and using SBOMs as a continuous security tool, not a checkbox.
Threat Modeling
STRIDE, attack trees, and risk-driven threat models that satisfy ISO 14971, IEC 62304, and FDA reviewers.
Recent Episodes with Christian
View all →Work with Christian and the Blue Goat Cyber team
Get expert help with FDA premarket and postmarket cybersecurity for your medical device.
Schedule Discovery




