Skip to content

Timeline

Three decades of building, breaking, and securing.

From the Air Force Academy to founding Blue Goat Cyber, two bestselling books, the Med Device Cyber Podcast, 24 Ironmans, and two of the Seven Summits. The arc of a career that ended up where it was always headed.

1 milestone
  1. 1970Athletic & Personal

    Born

    The starting line. Everything else on this page is what came after.

2 milestones
  1. 1982Athletic & Personal

    Arkansas, age 12

    A childhood split between California and Arkansas — unstable, uncertain, chaotic. The day that sticks: walking home from school to find the AMC Gremlin gone, the brothers bandaged from a wreck, and mom at the table eating raw hamburger meat from the package. The origin of a lifelong craving for certainty and significance — and, eventually, of the Secure Methodology that argues against both.

  2. 1984Career

    First computer, a Tandy Color Computer 2

    A 14-year-old, a TRS-80 CoCo 2, and the first time a machine did exactly what it was told. The hook that became a career.

1 milestone
  1. 1992Athletic & Personal

    Grandpa Gordon dies — the unsaid goodbye

    Junior year at USAFA. Grandpa Gordon Virgil Ratledge — WWII vet, Purple Heart, land-mine survivor — was the only father figure. The goodbye went unsaid. Thirty years later, that single in-between moment became the seed of the second book.

2 milestones
  1. 1989Athletic & Personal

    Salutatorian, Clarksville High — and a first speech

    Graduated Clarksville High School in Arkansas as Salutatorian. The salutatorian address was the first speech of a life that would eventually be built around them.

  2. 1989Career

    Accepted to all three U.S. service academies

    West Point, Annapolis, and the Air Force Academy all said yes. Chose USAFA — the deciding factor was flying jets like Top Gun.

1 milestone
  1. 1993Career

    U.S. Air Force Academy graduate

    Graduated with an engineering degree, then to Keesler AFB for first cybersecurity training.

3 milestones
  1. 2003Athletic & Personal

    First triathlon — on a dare

    A competitive friend threw down a challenge. Accepted it without owning a bike and barely able to swim the length of a backyard pool. Borrowed a bike, raced the Scott AFB Olympic with no socks, crossed the line with bloody feet and beat the friend. The Ironman mantra picked up that day still applies: Anything Is Possible.

  2. 2007Athletic & Personal

    First full Ironman, Louisville

    Four years after the dare, finished Ironman Louisville in 14:46:49. The race that opened the door to the next 23 Ironmans, and eventually to Kona.

  3. 2008Career

    First of six U.S. patents in simulated network attack and defense

    Years of penetration testing, incident response, and consulting across regulated industries crystallized into patented methods for rehearsing attacks before adversaries could.

5 milestones
  1. 2013Athletic & Personal

    The defining moment — quit without a backup

    Walked into the CEO's office and resigned with no next job lined up. Then deep inner work: Landmark Forum, the Dickens Process, and the slow dismantling of the need to be the smartest person in the room. The chapter that made the next one possible.

  2. 2014Career

    Founded Alpine Security

    Launched a cybersecurity firm focused on penetration testing, incident response, and training. Built it into a recognized name before exit.

  3. 2014Athletic & Personal

    Mount Rainier training

    Roped-team glacier travel, crevasse rescue, and self-arrest on the Muir snowfield — preparation for the bigger peaks that followed.

    Christian Espinosa training on Mount Rainier
  4. 2015Athletic & Personal

    Ironman World Championship, Kona

    One of 24 Ironman finishes. Kona is the qualifier-only championship — a brutal lava-field marathon after 2.4 miles of ocean and 112 miles of bike.

    Christian Espinosa finishing the Ironman World Championship in Kona, Hawaii
  5. 2013–2015Athletic & Personal

    Seven Summits — Kilimanjaro and Elbrus

    Two of the Seven Summits. Kilimanjaro in 2013, where the question stopped being 'what's next?' and started being 'what for?' Elbrus in 2015, where the loneliness of relentless achievement landed for the first time — the seed of Show No Weakness.

    Christian Espinosa on the summit of Mount Elbrus in Russia
12 milestones
  1. 2020Career

    Sold Alpine Security to Cerberus Sentinel

    Exited after six years of growth, with 50+ medical device cybersecurity submissions cleared, zero clearance failures.

  2. 2021Athletic & Personal

    Denmark, the rock bottom

    December 2021. On the flight in, a parent-company CEO threatened him over Secure Methodology IP. Copenhagen immigration flagged him at the border. A month later, the relationship with Trisha ended. The Danish bottom that The In-Between is built around.

  3. 2022Athletic & Personal

    Six blood clots, caught by a Doppler

    A scan caught six clots in the left leg. The experience made medical device cybersecurity intensely personal and reshaped what came next.

  4. 2022Career

    Founded Blue Goat Cyber

    A service-disabled veteran-owned medical device cybersecurity firm. FDA premarket and postmarket, built on AAMI SW96, ISO 13485, ISO 14971, IEC 62304, SPDF, and SBOMs.

  5. 2023Athletic & Personal

    Ironman 70.3 Chattanooga, the comeback race

    First race back after the clots. Half the distance of a full, all of the meaning. Different body, different reasons, same finish line — proof the engine still ran.

    Christian Espinosa at the Ironman 70.3 Chattanooga comeback race
  6. 2023Books & Media

    The In-Between: Life in the Micro

    Memoir published December 12, 2023. Leadership through self-leadership, recognizing the small moments that decide the big ones.

    The In-Between book cover
  7. 2024Books & Media

    Launched the Med Device Cyber Podcast

    Weekly conversations on medical device security with engineers, regulators, and clinicians. New episodes on Spotify, Apple Podcasts, and YouTube.

    Christian Espinosa recording the Amplifiz podcast
  8. 2025Career

    250+ FDA submissions cleared, zero deficiencies

    Under Christian's leadership, Blue Goat Cyber has supported more than 250 FDA medical device submissions with no client failing to clear due to cybersecurity.

  9. 2025Speaking & Press

    MedTech World Awards gala, London

    Recognized alongside the MedTech World community for contributions to medical device cybersecurity and the public conversation around patient safety.

    Christian Espinosa at the MedTech World Awards gala in London
  10. 2025Athletic & Personal

    70 countries and counting

    Bells Beach to the Waipio Valley to the back roads of Tulum. 200 scuba dives along the way. Travel as the long, slow education that work alone never finishes.

    Surfers in the lineup at Bells Beach, Australia
  11. 2026Books & Media

    Medical Device Cybersecurity. The Book.

    Coming 2026. Premarket and postmarket coverage across FDA, EU MDR, PMDA, and NMPA. Threat modeling, SBOMs, and coordinated vulnerability disclosure.

    Medical Device Cybersecurity book cover
1 milestone
  1. OngoingAthletic & Personal

    24 Ironmans, 2 of the Seven Summits, 300 skydives

    200 scuba dives. Many Half Ironmans, 50-mile ultramarathons, and multiday adventure races. Endurance pursued now for connection, not for proof.

    Christian Espinosa inverted in an aerobatic biplane

What's next

The next chapter is being written in operating rooms, ICUs, and FDA review queues.