Living together in a group is a strategy many animals use to survive and thrive. And a big part of what makes that living situation successful is listening. In this episode, we explore the collaborative world of the naked mole-rat. Threshold is nonprofit, listener-supported, and independently produced. You can support Threshold by donating today . To stay connected, sign up for our newsletter . Operation frog sound! Send us your frog sounds for an upcoming episode. We want you to go out, listen for frogs and toads, and record them. Just find someone croaking, and hit record on your phone. It doesn’t matter if there’s background noise. It doesn’t even matter if you’re not sure whether or not you’re hearing an amphibian—if you think you are, we would love to get a recording from you. Please also say your name and where you are in the world, and then email the recording to us at outreach@thresholdpodcast.org…
Player FM - Internet Radio Done Right
Checked 15h ago
Agregado hace veinticuatro semanas
Contenido proporcionado por Tines. Todo el contenido del podcast, incluidos episodios, gráficos y descripciones de podcast, lo carga y proporciona directamente Tines o su socio de plataforma de podcast. Si cree que alguien está utilizando su trabajo protegido por derechos de autor sin su permiso, puede seguir el proceso descrito aquí https://es.player.fm/legal.
Player FM : aplicación de podcast
¡Desconecta con la aplicación Player FM !
¡Desconecta con la aplicación Player FM !
))
Daily Deals
Podcasts que vale la pena escuchar
PATROCINADO
BeyondTrust’s Morey Haber: The challenges for security operations teams due to identity-based risks in a remote working world
Manage episode 446959461 series 3610934
Contenido proporcionado por Tines. Todo el contenido del podcast, incluidos episodios, gráficos y descripciones de podcast, lo carga y proporciona directamente Tines o su socio de plataforma de podcast. Si cree que alguien está utilizando su trabajo protegido por derechos de autor sin su permiso, puede seguir el proceso descrito aquí https://es.player.fm/legal.
In this episode of the Future of Security Operations podcast, Thomas chats with Morey Haber, Chief Security Officer at BeyondTrust. BeyondTrust is a worldwide leader in Privileged Access Management (PAM), focused on addressing the most urgent cybersecurity challenges, including zero trust, ransomware, cloud security, and more.
Morey has more than 25 years of IT industry experience, has authored four books, is a founding member of the industry group Transparency in Cyber, and in 2020 was elected to the Identity Defined Security Alliance (IDSA) Executive Advisory Board. Morey currently oversees BeyondTrust security and governance for corporate and cloud-based solutions and regularly consults for global periodicals and media.
Topics include:
- Morey’s journey in cybersecurity, starting almost 20 years ago in a software action team.
- The cultural and perception shift that vulnerability management and security operations have undergone over the past 20 years.
- The challenges modern security operations face due to identity-based risks increasing in a remote working world.
- The exploitable flaws seen in two-factor authentication (2FA) and multi-factor authentication (MFA) identification.
- How BeyondTrust specializes in privileged access and least privilege to ensure the integrity of all transactions.
- The differences with implementing security disciplines in the cloud.
- How Morey stays on top of the latest issues and threats in the cybersecurity world.
- The importance of self-discipline when it comes to mental health and overcoming the risk of burnout, and how managers can best support this.
- Some of the most memorable security incidents Morey has come across.
- Morey’s stance on what security teams should be wary of when it comes to ChatGPT.
- What cybersecurity might look like in five years’ time with advances in AI taken into consideration.
Resources:
LinkedIn: https://www.linkedin.com/in/mjhaber/
39 episodios
CompartirManage episode 446959461 series 3610934
Contenido proporcionado por Tines. Todo el contenido del podcast, incluidos episodios, gráficos y descripciones de podcast, lo carga y proporciona directamente Tines o su socio de plataforma de podcast. Si cree que alguien está utilizando su trabajo protegido por derechos de autor sin su permiso, puede seguir el proceso descrito aquí https://es.player.fm/legal.
In this episode of the Future of Security Operations podcast, Thomas chats with Morey Haber, Chief Security Officer at BeyondTrust. BeyondTrust is a worldwide leader in Privileged Access Management (PAM), focused on addressing the most urgent cybersecurity challenges, including zero trust, ransomware, cloud security, and more.
Morey has more than 25 years of IT industry experience, has authored four books, is a founding member of the industry group Transparency in Cyber, and in 2020 was elected to the Identity Defined Security Alliance (IDSA) Executive Advisory Board. Morey currently oversees BeyondTrust security and governance for corporate and cloud-based solutions and regularly consults for global periodicals and media.
Topics include:
- Morey’s journey in cybersecurity, starting almost 20 years ago in a software action team.
- The cultural and perception shift that vulnerability management and security operations have undergone over the past 20 years.
- The challenges modern security operations face due to identity-based risks increasing in a remote working world.
- The exploitable flaws seen in two-factor authentication (2FA) and multi-factor authentication (MFA) identification.
- How BeyondTrust specializes in privileged access and least privilege to ensure the integrity of all transactions.
- The differences with implementing security disciplines in the cloud.
- How Morey stays on top of the latest issues and threats in the cybersecurity world.
- The importance of self-discipline when it comes to mental health and overcoming the risk of burnout, and how managers can best support this.
- Some of the most memorable security incidents Morey has come across.
- Morey’s stance on what security teams should be wary of when it comes to ChatGPT.
- What cybersecurity might look like in five years’ time with advances in AI taken into consideration.
Resources:
LinkedIn: https://www.linkedin.com/in/mjhaber/
39 episodios
Toate episoadele
×
T
The Future of Security Operations
In this week’s episode of The Future of Security Operations podcast, Thomas is joined by Joe McCallister. Joe’s journey in security is truly unique - in less than a decade, he pivoted from selling BMWs to his current role as Senior Manager of Cybersecurity Operations at The Trade Desk. He’s also led impactful initiatives in risk management, threat hunting, and incident response at Synoptek. In this episode: [02:18] Transitioning from selling BMWs to leading a security team [06:14] Moving from practitioner to manager and leaning into the role of the "communications guy" [09:52] Balancing security team priorities with company goals [11:40] The threats that keep Joe up at night [14:06] How The Trade Desk's rapid growth has affected day-to-day operations [16:10] Ensuring security stays top of mind for other business units [19:32] Practical tips for strengthening collaboration with IT and other teams [22:13] Joe’s approach to hiring and building a resilient team [26:30] Enabling his incident response team to thrive, even when he's not there [30:58] Joe’s top three leadership principles [33:22] Tips for salary negotiation, both as a practitioner and a manager [39:58] Navigating imposter syndrome and anxiety [42:37] How AI is fueling Joe’s optimism for the future of SecOps [44:29] Connect with Joe The Future of Security Operations is brought to you by Tines , the orchestration, automation, and AI platform that powers some of the world’s most important workflows. Where to find Joe: LinkedIn Rocky Mountain Information Security Conference (May 28 - 30, 2025) Where to find Thomas Kinsella: LinkedIn Tines Resources mentioned: Colorado=Security Annual Salary Surveys & Resources…
T
The Future of Security Operations
1 LastPass's Christofer Hoff on navigating incidents while rebuilding the security org from scratch 55:59
The Future of Security Operations podcast is back for a sixth season, and, to kick it off, Thomas is joined by Christofer Hoff. Christofer has over 30 years of experience in network and information security architecture, development, engineering, operations, and management, including security leadership roles at Bank of America, Citadel, and Juniper Networks. He’s currently Chief Secure Technology Officer at LastPass, a unique role that combines the duties of CSO and CTO, while also serving on the board at FIDO Alliance. In this episode: [02:00] How blogging landed Christofer his first couple of jobs in security [06:50] Taking a more holistic approach to security through collaboration [09:40] Rebuilding LastPass's security org from scratch [12:03] Reflecting on incidents - what LastPass did right [16:12] Communicating with customers and the broader community during incidents [20:15] Navigating tech debt as a security leader [23:55] The biggest challenges AI has produced for his team [25:16] How LastPass uses an AI working group for decision-making [29:00] The evolving challenges of browser security [35:05] Passkeys, passwords and the future of secure authentication [41:40] Tips on hiring and structuring effective security teams [46:47] How LastPass creates efficiency through automation [50:38] The biggest changes he'd like to see in security [54:44] Connect with Chris The Future of Security Operations is brought to you by Tines , the orchestration, automation, and AI platform that powers some of the world’s most important workflows. Where to find Christofer Hoff: LinkedIn Chris's Rational Survivability blog Where to find Thomas Kinsella: LinkedIn Tines Resources mentioned: Chris on Google’s Cloud Security Podcast LastPass Security Incident Summary…
T
The Future of Security Operations
In this week’s episode of The Future of Security Operations podcast, Thomas is joined by Brent Deterding. Brent has over 25 years of experience in security, both on the vendor side and now as a security leader. He spent a big part of his career with cloud-native security analytics platform SecureWorks, and he’s currently the CISO of Afni, a global provider of contact center solutions in the U.S., Philippines, and Mexico. Brent and Thomas discuss: - His unconventional path to becoming a CISO - Building a security team with zero attrition - Removing the burden of stress in incident response - Strategies for risk prioritization - Facing off against cybercriminal group Scattered Spider - Why prioritization and leadership are among security's biggest challenges - Being dubbed "the happy CISO" after reporting high levels of job satisfaction - Brent's four security non-negotiables - The right way to approach CISOs as a security vendor - Measuring success when you're metrics-averse - What the SOC will - and should - look like in five years The Future of Security Operations is brought to you by Tines , the smart, secure workflow builder that powers some of the world’s most important workflows. https://www.tines.com/solutions/security Where to find Brent Deterding: LinkedIn: https://www.linkedin.com/in/brent-deterding/ Afni: https://www.afni.com/ Where to find Thomas Kinsella: LinkedIn: https://www.linkedin.com/in/thomas-kinsella/ Twitter/X: https://twitter.com/thomasksec Tines: https://www.tines.com/ Resources mentioned: How to connect with me as a vendor by Brent Deterding on LinkedIn: https://www.linkedin.com/feed/update/urn:li:activity:7146566282128076800/ In this episode: [01:56] Brent's unconventional path to becoming a CISO [04:10] Finding the right fit at Afni [06:09] Separating his identity from his job and removing the burden of stress [10:22] Why Brent sees risk prioritization and leadership as security's biggest challenges [13:02] Brent's first steps as CISO at Afni including deploying MFA across 10,000 employees [16:29] Going up against threat group Scattered Spider [17:43] Brent's custom risk frameworks [23:03] Measuring success as someone who's metrics-averse [26:19] How Brent developed his unique leadership style [29:13] Supporting his team to do their best work [31:55] Brent's tips for security vendors [36:07] Using AI for resilience and protection [39:20] What security could and should look like in five years [42:53] Connect with Brent…
T
The Future of Security Operations
1 Ask Sage's Nicolas Chaillan on moving the DOD to zero trust and deploying Kubernetes in space 48:06
In this week’s episode of The Future of Security Operations podcast, Thomas is joined by Nicolas Chaillan. Nicolas is a security leader who has held several high-profile roles in US federal agencies including Chief Software Officer for the US Air Force and Space Force, Special Advisor for Cloud Security and DevSecOps at the Department of Defense (DOD), and Special Advisor for Cybersecurity and Chief Architect for Cyber.gov at the Department of Homeland Security. He is also the founder of no less than 13 companies, including Ask Sage, a GPT-powered platform that brings Generative AI capabilities to government teams. Nicolas and Thomas discuss: - Building the US government's first zero trust implementation - Putting Kubernetes on jets and space systems - The challenges of bringing new technologies to the federal government - How the threat landscape will continue to evolve for US federal agencies - The biggest mistakes entrepreneurs make - How cross-team collaboration helped him create meaningful change at the DOD - The future of AI in security - The inspiration behind his AI-powered platform, Ask Sage The Future of Security Operations is brought to you by Tines, the smart, secure workflow builder that powers some of the world’s most important workflows. https://www.tines.com/solutions/security Where to find Nicolas Chaillan: LinkedIn: https://www.linkedin.com/in/nicolaschaillan/ Twitter/X: https://twitter.com/NicolasChaillan Nic's YouTube channel: https://www.youtube.com/channel/UCt7jKHaxWS8W_4rcKGg7X9w Ask Sage: https://www.asksage.ai/ Where to find Thomas Kinsella: LinkedIn: https://www.linkedin.com/in/thomas-kinsella/ Twitter/X: https://twitter.com/thomasksec Tines: https://www.tines.com/ Resources mentioned: Making An Impact: Nicolas Chaillan, CEO Magazine: https://www.theceomagazine.com/executive-interviews/government-defence/nicolas-chaillan/ In this episode: [02:20] Becoming a self-taught coder at 7 and founding his first company at 15 [05:02] Shipping 187+ technology products as a founder, in verticals as varied as healthcare, retail and banking [07:08] The biggest mistakes entrepreneurs make [08:40] His latest product, generative AI platform Ask Sage [11:30] The challenges of bringing a new product to the US government [13:45] Building the first zero trust implementation in the government as Special Advisor for Cybersecurity at the Department of Homeland Security [15:20] Advocating for new technologies at federal agencies [19:40] Deploying Kubernetes on 50-year-old hardware on the F16 jet at the Department of Defense [22:02] Dealing with pushback and internal resistance to change [24:50] Recruiting internal help to establish force-wide DevSecOps at the DOD [29:00] Becoming Federal Chief Technology Officer at Qualys [30:30] Reflecting on the changes he implemented while working for the US government [33:12] Deciding which companies to work with as an advisory board member [36:40] How the threat landscape will continue to evolve for US federal agencies [40:50] TikTok as a channel for misinformation and national security weapon [44:18] Nicolas' predictions for the future of security [47: 10] Connect with Nicolas…
T
The Future of Security Operations
1 The NFL's George Griesler on securing the Super Bowl and reducing risk through collaboration 44:34
In this week’s episode of The Future of Security Operations podcast, Thomas is joined by George Griesler. George has been working in cybersecurity since 1997, when he assumed the role of Senior Network administrator at the United States Golf Association (USGA), eventually advancing to Director of Information Security. He currently serves as the Senior Director of Cybersecurity at the National Football League (NFL), where he works to secure events like the Super Bowl, which in 2024 was the most-watched telecast ever. George and Thomas discuss: - What security operations looked like in 1997 - Protecting the secrets of regulation golf equipment at the USGA - The shift in security and privacy needs at live sports events - Securing scents, flavors, and other chemical formulations at IFF - Preparing for Super Bowl LXXVIII in the wake of the MGM Resorts cyber attack - The Super Bowl threat profile, from scoreboard hacking to stadium credentials - Collaborating with cybersecurity experts from CISA, the FBI, Caesars Palace, and the MGM Grand. - Aligning security operations with physical security - The reality of working on high-pressure events - The benefits of knowledge sharing with other teams working on live sports events - The importance of relationship building across internal security teams: - The potential of automation, orchestration, and AI in incident response The Future of Security Operations is brought to you by Tines, the smart, secure workflow builder that powers some of the world’s most important workflows. https://www.tines.com/solutions/security Where to find George Griesler: NFL: https://www.nfl.com/ LinkedIn: https://www.linkedin.com/in/georgegriesler/ Where to find Thomas Kinsella: Twitter/X: https://twitter.com/thomasksec LinkedIn: https://www.linkedin.com/in/thomas-kinsella/ Tines: https://www.tines.com/ Resources mentioned: A Cyberattack Shuts Down MGM Resorts In Las Vegas And Other Cities: https://www.forbes.com/sites/suzannerowankelleher/2023/09/12/a-cyberattack-mgm-resorts-las-vegas/?sh=c1b5096505c0 The 1,000-ton screen bringing Super Bowl LVI to the lucky fans inside the stadium: https://edition.cnn.com/2022/02/11/sport/super-bowl-lvi-samsung-infinity-screen-sofi-stadium-tech-spc-intl/index.html In this episode: [01:50] What infrastructure management and incident response looked like in 1997 [03:30] His projects at the United States Golf Association (USGA), including securing a golf handicap information network [06:05] Witnessing the digital transformation of live sports events [08:40] Securing flavors, scents and other chemical formulations at IFF [13:20] Building a threat model for large OT environments [15:30] Increasing security awareness and culture across the organization [17:45] Moving to the NFL [21:20] How George's team prepare for the Super Bowl [24:10] Partnering with cybersecurity experts at CISA, the FBI, and local partners in Las Vegas like Caesars Palace and the MGM Grand. [27:00] The Super Bowl's threat profile, from scoreboard hacking to stadium credentials to online identities of individual players [29:20] Inside the NFL's Super Bowl command centre [30:40] Ensuring the team is supported to handle high-pressure events [32:55] Knowledge sharing with security teams on other live sports events, from The Olympics to the World Cup [37:00] Reducing risk through collaboration across the security team [38:35] AI as a defender tool and attacker tool [41:50] The future of the SOC [43:15] Connect with George…
T
The Future of Security Operations
In this week’s episode of The Future of Security Operations podcast, Thomas is joined by Adam Khan. Adam is a cybersecurity and technology leader with over 25 years of experience working at Fortune 500 companies. He has a proven track record of building and managing global security teams, leading engineering, infrastructure, application, and product, and is currently VP of Global Security Operations at Barracuda. Adam and Thomas discuss: - Building discipline and resilience by working on SRE teams - How a well-known DDoS attack changed his career path - Using automation to reduce alert fatigue - Strategies for plugging the security skills gap - The potential of AI-driven XDR - How cyber attacks are evolving in the age of AI - Lessons learned from researching the history of cybersecurity - Empowering teams to do their best work - Creating a culture of continuous learning The Future of Security Operations is brought to you by Tines , the smart, secure workflow builder that powers some of the world’s most important workflows. https://www.tines.com/solutions/security Where to find Adam Khan: Adam's website: https://www.adamkhancyber.com/ LinkedIn: https://www.linkedin.com/in/adamkhan-cyber/ Barracuda: https://www.barracudamsp.com/ and sales@barracudamsp.com Where to find Thomas Kinsella: Twitter/X: https://twitter.com/thomasksec LinkedIn: https://www.linkedin.com/in/thomas-kinsella/ Tines: https://www.tines.com/ Resources mentioned: 2023 Global Cyber Threat Report by Adam Khan: https://www.adamkhancyber.com/post/2023-global-cyber-threat-report Adam's five-part cybersecurity history series on smartermsp.com: https://smartermsp.com/author/akhan/ DarkReading: https://www.darkreading.com/ BleepingComputer: https://www.bleepingcomputer.com/ In this episode: [02:10] Switching from site reliability engineering (SRE) to SecOps [03:40] How the DDoS attack on Amazon, eBay and Priceline in 2008 piqued his interest in security [04:37] Building discipline and resilience by working on SRE teams [09:05] Navigating Barracuda's acquisition of SKOUT [10:22] How growing companies can benefit from a external XDR platform [11:50] Prioritizing the alerts that matter most to customers [13:03] Using automation to enrich threat intelligence and root out false positives [14:50] The potential of AI-driven XDR [16:40] How cyber attacks have evolved as adversaries use AI tools like FraudGPT and WormGPT [19:30] Adam's three key takeaways from researching the history of cybersecurity [23:20] Strategies for tackling the talent shortage [25:15] Empowering teams to do their best work [28:10] How Adam stay on top of the latest security trends [31:35] The importance of making mistakes [32:20] Promoting a culture of blameless incident reviews [34:40] Predictions for the future [35:50] Connect with Adam…
T
The Future of Security Operations
1 Reddit’s Matt Johansen on renouncing superhero culture and what comes next after “shift left” 56:59
In this week’s episode of The Future of Security Operations podcast, Thomas is joined by Matt Johansen. Matt is a security veteran who has helped defend startups, the biggest financial companies in the world, and everything in between. Alongside his day job as Head of Software Security at Reddit, he teaches companies how to protect against cyber attacks, and coaches entrepreneurs and CISOs that need help with infrastructure, application, cloud, and security policies. He also writes Vulnerable U, a weekly newsletter that talks about embracing the power of vulnerability for growth. Thomas and Matt discuss: - Moving from a large security team at Bank of America to a small one at Reddit - Embracing scrappiness and doing more with less - Overcoming sunk-cost fallacy - Why the 2014 Sony hack was a pivotal time for AppSec - Running the threat research centre at White Hat - What he looks for when hiring in AppSec, the SOC and beyond - His decision to start creating content about mental health in security - Moving past imposter syndrome - Renouncing superhero culture - Paved paths and guardrails, and what comes next after "shift left" - Lessons learned from Reddit's 2023 security incident - The power of automating incident response The Future of Security Operations is brought to you by Tines , the smart, secure workflow builder that powers some of the world’s most important workflows. https://www.tines.com/solutions/security Where to find Matt Johansen: Vulnerable U newsletter: https://vulnu.mattjay.com/ Twitter: https://twitter.com/mattjay LinkedIn: https://www.linkedin.com/in/matthewjohansen/ TikTok: https://www.tiktok.com/@vulnerable_matt Reddit: https://www.redditinc.com/ mattjay.com: https://www.mattjay.com Where to find Thomas Kinsella: Twitter/X: https://twitter.com/thomasksec LinkedIn: https://www.linkedin.com/in/thomas-kinsella/ Tines: https://www.tines.com/ Resources mentioned: The Tech Professional's Guide to Mindfulness by Matt Johansen: https://www.mattjay.com/blog/the-tech-professionals-guide-to-mindfulness Matt's piece on developer experience in the Vulnerable U newsletter: https://vulnu.mattjay.com/p/vulnu-003-courage-quit Reddit's post on a February 2023 incident: https://www.reddit.com/r/reddit/comments/10y427y/we_had_a_security_incident_heres_what_we_know/ Collaborative Incident Response Best Practices: Don't Rely on Superheroes by Matt Johansen: https://www.mattjay.com/blog/superhero-incident-response Threat modeling depression by Matt Johansen: https://www.mattjay.com/blog/threat-model-depression In this episode: [02:14] Going from long-time Reddit user to employee [04:50] Running AppSec at Reddit [07:30] Being the internet's punching bag and boxing gloves [10:30] Building a team from scratch at White Hat and lessons learned from the 2014 Sony hack [15:10] Matt's approach to hiring [21:15] His decision to create content about mental health in security [23:20] Turning his Twitter network into his IRL network [27:55] Moving past imposter syndrome [30:00] Tools for safeguarding your mental health in incident response [36:20] Preserving work-life balance for his teams at Reddit [39:15] Moving past "shift left", and paved path to production and guardrails [47:40] Lessons learned from a February 2023 incident at Reddit [51:20] Renouncing superhero culture [52:20] Automating incident response [54:12] Connect with Matt…
T
The Future of Security Operations
This week on The Future of Security Operations podcast, Thomas is joined by Prima Virani. Prima is a security engineer who worked across industries as varied as oil and gas and Fintech before becoming Principal Security Engineer at Twilio. With over a decade of experience spanning infrastructure security engineering, incident detection and response, and forensics, she's also shared insights at countless security conferences around the world, including SecTOR Canada and Agile India. In this episode, Prima and Thomas discuss: - The unique challenges of working in forensics - Her transition to detection and response and cloud security - Building a security detection framework at Segment - Reducing mean time to resolve through automation - Using data to prioritize which processes should be automated - Merging teams and technologies when Segment was acquired by Twilio - Joining the securing platform engineering team at Twilio - Designing a challenging and varied career in security - The influence of mentorship on career growth - Democratizing security through knowledge sharing - How security will change in the next five years The Future of Security Operations is brought to you by Tines , the smart, secure workflow builder that powers some of the world’s most important workflows. https://www.tines.com/solutions/security Where to find Prima Virani: Twitter: https://twitter.com/secnerdette?lang=en LinkedIn: https://www.linkedin.com/in/primavirani/ Twilio: https://www.twilio.com/en-us Where to find Thomas Kinsella: Twitter/X: https://twitter.com/thomasksec LinkedIn: https://www.linkedin.com/in/thomas-kinsella/ Resources mentioned: Hosting Fleet on AWS EKS by Prima Virani: https://segment.com/blog/hosting-fleetdm-on-aws-eks/ Fleet Device Management: https://fleetdm.com/ In this episode: [02:22] Prima's introduction to cybersecurity career opportunities as a teenager [06:30] The shift from forensics to detection and response [09:15] Gaining experience in vulnerability and patch management, and network security [14:15] Building a security detection framework at Segment using SOCless [18:10] Using automation to reduce alert noise and improve response times [20:30] The impact of automation on security team burnout [22:50] Merging security teams, practices and technologies during Twilio's acquisition of Segment [25:30] Moving to the securing platform engineering team at Twilio [27:40] Growing her knowledge of AWS, Kubernetes and GCP [32:40] Prima's plans to embrace machine learning in detection engineering [34:20] The importance of mentorship and knowledge sharing in career growth [37:30] Prima's all-time favorite projects, including hosting FleetDM on AWS EKS [39:36] The future of security operations through Prima's eyes [42:01] Prima's advice for security practitioners [43:58] Connect with Prima…
T
The Future of Security Operations
1 Fastly’s Andrew Santell on going from the Navy to Netflix and breaking free of bad processes 48:45
On this episode of The Future of Security Operations podcast, Thomas is joined by Andrew Santell. Andrew is an experienced security leader who worked for the U.S. Navy for over a decade before moving into the private sector. In 2021, he founded the Security Operations program at Netflix, and recently, he joined edge cloud platform Fastly, where he is the Director of Security Operations and Cyber Defense. In this episode, Andrew and Thomas discuss: - Navigating the unique challenges of the Navy, from log management to prioritization - Making the leap from the Navy to tech - Building a security operations team and program from scratch at Netflix - Red teaming phishing response playbooks at Netflix to test their effectiveness - Recognizing the value of good processes - Why teams should design processes first, automate later - Creating a feedback loop between teams at Fastly - How “shifting left” has helped Andrew’s team reduce vulnerabilities - Using automation for risk assessment at Fastly - Andrew’s approach to incidents like the Log4J vulnerabilities - Why growth in the vendor market is a good thing for practitioners - Why automation should be a requirement, not just a best practice - What advancements in AI mean for threat detection - The importance of risk-based decision-making - The potential of self-remediation - Why good security leadership starts with taking care of your people The Future of Security Operations is brought to you by Tines , the smart, secure workflow builder that powers some of the world’s most important workflows. https://tines.com/solutions/security Where to find Andrew Santell: LinkedIn: https://www.linkedin.com/in/ajsantell/ Fastly: https://www.fastly.com/ Where to find Thomas Kinsella: Twitter/X: https://twitter.com/thomasksec LinkedIn: https://www.linkedin.com/in/thomas-kinsella/ Resources mentioned: Google’s SRE handbook: https://sre.google/sre-book/table-of-contents/ Netflix’s 2018 blog post on SOCless: https://www.linkedin.com/pulse/socless-detection-team-netflix-alex-maestretti/ In this episode: [02:05] Andrew’s career journey so far [05:35] The unique requirements of working in the Navy [09:12] Risk-driven decision making [11:11] Self-assessing phishing response controls and mitigations at Netflix [14:28] Andrew’s decision to leave the Navy and his transition to the private sector [16:12] Comparing approaches to security at the Navy and in tech [19:26] Breaking free of bad processes [23:20] Broadening roles to include pen testing, application security, and vulnerability management [27:27] How Andrew approaches automation at Fastly [31:56] Protecting Fastly’s infrastructure [33:57] How SecOps has changed and where it’s going next [40:18] Embracing automation for vulnerability management [42:45] Taking care of your people as a security leader [44:56] Making engineering and automation part of prioritization [47:19] Connect with Andrew…
T
The Future of Security Operations
To kick off season 5 of the Future of Security Operations podcast, Thomas is joined by Mandy Andress. Mandy is the Chief Information Security Officer at Elastic, a leading platform for search-powered solutions, and has more than 25 years of experience in information risk management and security. Before Elastic, Mandy led the information security function at MassMutual and established and built information security programs at TiVo, Evant, and Privada. She also founded an information security consulting company with clients ranging from startups to Fortune 100 companies. In this episode, Mandy and Thomas discuss: - Her move from accounting to security - Why she was drawn to Elastic's employee-centric culture - How her role at TiVo in the early '00s shaped her view of privacy - Switching from a technology-first to people-first approach to security - Recognizing the human factor in incident response - Embracing asynchronous operations on dispersed teams - The importance of bringing your authentic self to work - Staying technical as you move into leadership - How she puts her law degree to use as a CISO - Balancing compliance and overall security posture - Collaboration and knowledge sharing within the CISO community - Elastic's approach of knowledge sharing by default - How prioritizing analyst time will be critical in the future of SecOps - Adopting an infrastructure-as-code approach - Balancing between proactive security measures and reactive responses - Building a culture of security across the organization - Tips for surviving in security operations in tech The Future of Security Operations is brought to you by Tines, the platform that powers some of the world’s most important security workflows. https://www.tines.com/solutions/security Where to find Mandy Andress: LinkedIn: https://www.linkedin.com/in/mandyandress/ Elastic: https://www.elastic.co/ Where to find Thomas Kinsella: LinkedIn: https://twitter.com/thomasksec Twitter/X: https://www.linkedin.com/in/thomas-kinsella/ Resources mentioned: Surviving Security: How to Integrate People, Process & Technology by Mandy Andress: https://www.amazon.co.uk/Surviving-Security-Integrate-Process-Technology/dp/0672321297 Mandy’s 2001 BlackHat talk on wireless LAN security: https://www.youtube.com/watch?v=XtT2Ta87uow Elastic’s blog: https://www.elastic.co/blog In this episode: [01:57] Moving from accounting to security [02:43] Finding a company with strong vision, culture and business foundations [05:26] Working in network security in the early days of TiVo [07:05] What’s changed in security since 2001? [09:20] A career-long fascination with the human factor in incident response [10:30] Embracing empathy in her leadership style [12:25] Finding a workplace where you can be your authentic self [16:10] Exercising her technical muscles [17:45] The decision to study law [21:18] Balancing compliance and overall security posture [23:35] Knowledge sharing in the CISO community [24:22] Elastic's policy of being "radically transparent" [29:20] The future of security operations [31:29] How her security team works with product engineering [34:03] Adopting an infrastructure-as-code approach [35:01] Building a culture of security across the organization [38:09] Her advice for others working in security in a high-growth organization [41:50] Baking off security products in her home lab [44:37] Connect with Mandy…
T
The Future of Security Operations
1 Dmitriy Sokolovskiy: How SecOps teams can measure and communicate their ROI to senior leadership 43:30
In this episode of The Future of Security Operations podcast, Thomas interviews industry veteran Dmitriy Sokolovskiy. Dmitriy is a founding member of (ISC)2 Eastern Massachusetts Chapter, and has over 25 years of experience in the security industry, having led teams at Putnam Investments, CyberArk, and, most recently, Avid. He’s a mentor and advisor to several successful startups and sits on the advisory board of companies like Audience 1st. On this episode of The Future of Security Operations, Dmitriy discusses: His early career journey from IT support to security. Getting comfortable “losing sales on purpose” and building a cloud security program from the ground up at CyberArk. Running product security at Avid, where the customer base included Oscar-winning film editors and Grammy-winning sound engineers. A particularly memorable mistake - how Dmitriy accidentally rerouted every employee’s emails to his inbox on the first day on the job, and what that experience taught him. Learning to measure and communicate the security team’s ROI to senior leadership, with guidance from the team at Okta. Why he believes we need a new word to describe the cybersecurity industry. Dmitriy’s thoughts on the role security practitioners will play in fifth-generation warfare. Note: this episode was recorded before the October 2023 attacks in Israel and Gaza. Resources: LinkedIn…
T
The Future of Security Operations
In this episode of The Future of Security Operations podcast, David Seidman joins Thomas to discuss their career to date and what they have learned along the way. David is currently Head of Detection and Response at Robinhood, an online brokerage firm with a mission to democratize finance for everyone. David has almost 20 years of experience in software and security, having worked for huge names like Microsoft, Google, Salesforce, and now Robinhood. Topics include: David’s entry into security and their 10-year tenure at Microsoft. Dealing with the public’s and media’s interest in security incidents at global organizations like Microsoft, Google, and Salesforce. The changes that came with David’s move from large-scale organizations to Robinhood and the difference in operations and threat actors that they have seen. David’s detection strategy and how they approach the kill chain model. How David manages to keep on top of their technical capabilities while also keeping the mental health and performance of their team as high as possible. The lessons David has learned so far in their career about creating a culture of safety and high morale for SecOps teams. Decreasing friction around prioritizing between good business and good security operations. How David describes the state of security operations today. The challenge of false positives and ways to address the stress and burnout that come with them. The need for executive stakeholder communication skills as an incident responder. Where David sees security operations and incident response going in the next five years. Resources: LinkedIn…
T
The Future of Security Operations
1 Incode Technologies’ Jeff Moss: Scaling security for startups and defending against the ever-growing attack surface 35:29
In this episode of The Future of Security Operations podcast, Thomas speaks to Jeff Moss, Senior Director, Information Security, at Incode Technologies. Incode is the leading provider of world-class identity solutions for the world’s largest financial institutions, governments, retailers, hospitality organizations, and gaming establishments. Jeff has over 10 years of experience in tech and IT, moving from project and program management in areas such as construction and IT into cybersecurity, where he quickly worked his way up to becoming CISO and Senior Director of Information Security. He has countless licenses and certifications, including Certified Information Systems Auditor with ISACA, and he also has an MBA. Topics include: How Jeff decided to make the move from engineering to product security. His less traditional path into cybersecurity leadership and how he worked his way up to CISO in such a short space of time. The evolution of product security over the last five years. The increased attack surface within the industry and how to reduce the risks. What Jeff has learned from scaling security for numerous startups. Tips for the prioritization of initiatives that Jeff has learned as part of his MBA and his years as a project and program manager. Jeff’s approach to combining the technical and the business in his management. The shift in organizational structure with CISOs needing to report to the board and CEO. The proposed Securities and Exchange Commission (SEC) rulemaking in the US and what it means for the industry. What Jeff expects to see in security operations over the next five years. Resources: LinkedIn…
T
The Future of Security Operations
1 Quickbase’s Rebecca Harness: Securely engaging with technology partners and third-party vendors and overcoming the inevitability of human error 38:51
In this episode of The Future of Security Operations podcast, Thomas chats with Rebecca Harness, VP and Chief Information Security Officer at Quickbase. Quickbase is a no-code database and application development platform that enables anyone to safely build, iterate, and integrate their applications. Rebecca has 25 years of experience in information technology and over 12 years of experience in security specifically. Over her career, Rebecca has launched two of her own companies; she’s led numerous high-performing cybersecurity teams through the challenges of supporting cloud-first digital transformation strategies; and she’s a board member of ISACA St. Louis. She also has a Master of Science in Information Security Engineering. Topics include: Rebecca’s career journey from her start in IT to founding her first company, to becoming VP and CISO at Quickbase. The steps Rebecca takes to build a strong security culture within her teams. Balancing empathy and velocity as a CISO. The measures Rebecca feels best place SecOps teams to securely and safely engage with technology partners and third-party vendors. The inevitability of human error and how automation can help combat this. How Rebecca has seen SecOps evolve and the resource and skills gap being experienced across the industry and how this can be combated. How generative AI can be a key collaborator for SecOps teams. Where Rebecca sees the SecOps landscape going over the next five years. Rebecca’s experience in the MSP space and how she feels MSPs will be affected by attacks becoming less commodified and more targeted. The measures Rebecca takes to ensure her teams don’t burn out and remain passionate about their role. Resources: LinkedIn…
T
The Future of Security Operations
1 Sublime Security’s Josh Kamdjou: The state of today’s email threat landscape and how to defend without reinventing the wheel 40:37
In the first episode of this season of The Future of Security Operations podcast, Thomas speaks to Josh Kamdjou, founder and CEO of Sublime Security, the world's first open and adaptable email security platform, preventing email attacks using Detection-as-Code and behavioral AI. Josh has more than 13 years of experience in the security industry, doing a mix of government work and private consulting before founding Sublime Security in 2019. Josh holds a B.Sc. in Computer Science from the University of Maryland and is a regular speaker at security conferences and workshops. Topics include: Josh’s interesting path into security started with his career working with the government. How the approach to email security has changed over the last 10 years. The gap and lack of tooling that Josh discovered in email security led to the founding of Sublime Security. The types of business email compromise fraud that are still working today and how the threat landscape has changed. Moving from consultancy to creating a product and securing Sublime’s first customers. Putting yourself in your customers’ shoes to aid discovery and build a better product. How Josh’s experience working in government and industry shaped his approach to how he builds Sublime’s product. What companies are doing to successfully defend against email threats. Where security operations might be in five years and how teams will be doing more with less. Sublime Security’s plans for the next 12 months. Resources: LinkedIn…
Bienvenido a Player FM!
Player FM está escaneando la web en busca de podcasts de alta calidad para que los disfrutes en este momento. Es la mejor aplicación de podcast y funciona en Android, iPhone y la web. Regístrate para sincronizar suscripciones a través de dispositivos.
Daily Deals
Player FM : aplicación de podcast
¡Desconecta con la aplicación Player FM !
¡Desconecta con la aplicación Player FM !
))
