Cyber Security Interviews - podcast cover

Cyber Security Interviews

Douglas A. Brush | Weekly Interviews w/ InfoSec Proscybersecurityinterviews.com
There is “no one way” to start and stay in the field of cyber security. Whether you are involved from the military, law enforcement, consulting, or IT services, it doesn’t matter. I have had countless discussions for years with other professionals online, at conferences, or over drinks, which have changed the way I think about cyber security. That is where this podcast comes in. What if I can capture those moments and frank discussions? I want to share the stories from other cyber security leaders and influencers so everyone can learn from their respective journeys and challenges. Why did they take the path they did? Who were their mentors? How did they tackle some of their biggest career challenges? By hearing how the industry leaders and influencers got to where they are and how they overcame some of the problems they faced, I hope to shed light on the path for other professionals. I will discover what motivates them, explore their journey in cyber security, and discuss where they think the industry is going.

Episodes

#097 – HD Moore: The New Normal

HD Moore is the founder and CEO of Rumble Network Discovery ; a platform designed to make asset inventory quick and easy by combining active scanning with innovative research. Prior to starting Rumble, HD was best known as the founder of the Metasploit Project , the foremost open-source exploit development framework, and continues to be a prolific researcher and occasional speaker at security events. In this episode, we discuss starting with BBSs back in the day, starting the Metasploit project,...

Aug 03, 202036 min

#096 – Gabe Gumbs: Data Is An Asset

Gabe Gumbs has a deep-rooted passion for technology, information security, and problem-solving. As Chief Innovation Officer of Spirion —a leader in rapid identification and protection of sensitive data—he’s channeling that passion to make the digital world a safer place. Wielding a unique mix of technical vision, marketing, and business acumen, Gabe is shaping the future of data security and protecting the sensitive personal data of customers, colleagues, and communities around the world. Despit...

Jul 20, 202038 min

#095 – Shahrokh Shahidzadeh: Education Is a Big Part of IT

Shahrokh Shahidzadeh is the CEO of Acceptto . Shahrokh is a seasoned technologist and leader with 29 years of contribution to modern computer architecture, device identity, platform trust elevation, large IoT initiatives, and ambient intelligence research with more than 25 issued and pending patents. Before Acceptto, Shahrokh was a senior principal technologist contributing to Intel Corporation for 25 years in a variety of leadership positions where he architected and led multiple billion-dollar...

Jul 13, 202038 min

#094 – Deborah Golden: How Can I Support You Today

Deborah Golden is the US Cyber & Strategic Risk leader for Deloitte Risk & Financial Advisory . In the prior six years, Deborah served as the Government & Public Services (GPS) Cyber Risk Services leader, as well as the GPS Advisory Market Offering leader, GPS Empowered Well-Being leader and the lead principal for a major federal government health care provider. Deb has more than 25 years of information technology experience spanning numerous industries, with an in-depth focus on gov...

Jul 06, 202046 min

#093 – Kyle Hanslovan & Chris Bisnett: Crimeware Is a Business

Kyle Hanslovan comes to Huntress Labs from the U.S. Intelligence Community, where he supported defensive and offensive cyber operations for the past decade. He previously co-founded the defense consulting firm StrategicIO and actively participates in the ethical hacking community as a Black Hat conference trainer, STEM mentor, and Def Con CTF champion. Additionally, he serves in the Maryland Air National Guard as a Cyber Warfare Operator. Chris Bisnett is a veteran information security researche...

Jun 29, 202053 min

#092 – Jack Kudale: You Gotta Have More Cowbell

Jack Kudale is Founder and CEO at Cowbell Cyber with over two decades of business executive experience. Previous senior roles include COO at Cavirin, CEO at Lacework, both cloud security startups; SnapLogic, a leader in hybrid cloud integration; and CA Technologies, where Jack led DevOps sales for the Fortune 500 leader. With deep operational experience in the DevOps, Cybersecurity, IT Ops, & Big Data spaces, Jack leads Cowbell to execute on its vision of bridging the cyber insurab...

Jun 22, 202051 min

#091 – Daniel Ayala: Does This Help Us

Daniel Ayala is the Founder, and Managing Partner for Secratic , a strategic information security, and privacy consultancy focused on helping companies protect data and information, and be prepared before incidents happen. Daniel is also currently serving as the Interim Chief Information Security Officer for Michigan State University. Throughout his 24 year career, he has led security organizations large and small in banking and financial services, pharmaceutical, information, library, and ...

Jun 15, 202058 min

#090 – Anthony Bettini: Building What No One Else Has

Anthony Bettini is the CTO for WhiteHat Security , the leader in Application Security, enabling businesses to protect critical data, ensure compliance, and manage risk. Previously, Anthony ran Tenable Research where Anthony joined via Tenable’s acquisition of FlawCheck – a leading Container Security startup where Anthony was the CEO & Founder. Before its acquisition by Symantec, Anthony was CEO & Founder of Appthority, a leading Mobile Security startup, and winner of the “Most Innovative...

Jun 08, 202039 min

#089 – Ed Bellis: Complexity is the Enemy

Ed Bellis is a security industry veteran and expert and was once named “Information Security Executive of the Year”. He currently serves as the Chief Technology Officer and Co-founder of Kenna Security . He founded Kenna Security to deliver a data-driven risk-based approach to remediation and help IT teams prioritize and thwart would-be security threats. Ed is the former CISO of Orbitz and former Vice President, Corporate Information Security at Bank of America. He is an advisor to Dascena and f...

Jun 01, 202042 min

#088 – Mikko Hyppönen: You Might Have an Enemy In the Future

Mikko Hypponen is a global security expert and has worked at F-Secure since 1991. Currently, he serves as F-Secure's Chief Research Officer. Mikko has written on his research for the New York Times, Wired, and Scientific American , and he frequently appears on international TV. He has lectured at the universities of Stanford, Oxford, and Cambridge. He was selected among the 50 most important people on the web by the PC World magazine and was included in the FP Global 100 Thinkers list. Mikko sit...

May 25, 202050 min

#087 – Steve Moore: It’s a Balancing Act

Stephen Moore is a Vice President and the Chief Security Strategist at Exabeam and is also the host of The New CISO podcast . Stephen has more than 15 years of experience in information security, intrusion analysis, threat intelligence, security architecture, and web infrastructure design. Before joining Exabeam, Stephen spent more than seven years at Anthem in a variety of cybersecurity practitioner and leadership roles. He played a leading role in the response and remediation of the ...

May 18, 202051 min

#086 – Dave Kennedy: The Basics Are Still Challenging

David Kennedy is the founder of Binary Defense and TrustedSec . Both organizations focus on the betterment of the security industry. David also served as a board of director for the ISC2 organization. David was the former CSO for a Diebold Incorporated, where he ran the entire INFOSEC program. David is a co-author of the book "Metasploit: The Penetration Testers Guide," the creator of the Social-Engineer Toolkit (SET), Artillery, Unicorn, PenTesters Framework, and several pop...

May 11, 202046 min

#085 – John Strand: Making the Industry Better

John Strand is the owner of Black Hills Information Security , a firm specializing in penetration testing, Active Defense, and Hunt Teaming services. He is also the CTO of Active Countermeasures , a firm dedicated to tracking advanced attackers inside and outside your network. John has consulted and taught hundreds of organizations in the areas of cybersecurity, regulatory compliance, and penetration testing. John is a contributor to the industry shaping Penetration Testing Execution Standa...

May 04, 202046 min

#084 – Adam Hunt: A Game We Play

Adam Hunt is the CTO and Chief Data Scientist at RiskIQ . As Chief Data Scientist, Adam leads the data science, data engineering, and research teams at RiskIQ. Adam pioneers research automating the detection of adversarial attacks across disparate digital channels, including email, web, mobile, social media. Adam also has received patents for identifying new external threats using machine learning. Adam received his Ph.D. in experimental particle physics from Princeton University. As an award-wi...

Mar 23, 202031 min

#083 – Nate Fick: Give Teams Autonomy

Nate Fick is the General Manager of Elastic Security and former CEO of Endgame. He is also an Operating Partner at Bessemer Venture Partners. Before joining Endgame, Nate was CEO of the Center for a New American Security. He led Marine Corps infantry and reconnaissance units in combat in Afghanistan and Iraq. His book about that experience, One Bullet Away , was a New York Times bestseller, a Washington Post "Best Book of the Year," and one of the Military Times' "Best Military Books of the Deca...

Feb 17, 202037 min

#082 – Jamil Jaffer: Not All Nation-state Activity Is the Same

Jamil Jaffer is Senior Vice President for Strategy, Partnerships & Corporate Development at IronNet , a startup technology firm founded by former National Security Agency (NSA) Director Gen. Keith Alexander (ret.). Prior to joining IronNet, Jamil served as the Chief Counsel and Senior Advisor for the Senate Foreign Relations Committee and Senior Counsel to the House Intelligence Committee where he led the committee’s oversight of NSA surveillance and wrote the original version of the Cyberse...

Feb 10, 202037 min

#081 – James Patchett: Make Small Businesses Safe

James Patchett is the President and CEO of the New York City Economic Development Corporation . James has spent his career building stronger cities through investments in affordable housing, innovation, and 21st-century infrastructure. During his tenure, he has overseen some of the city’s most ambitious projects, including launching a citywide ferry system, developing Mayor de Blasio’s 100,000 jobs plan, and optimizing NYCEDC’s 60 million square feet of real estate. Prior to his appointment as N...

Jan 20, 202035 min

#080 – Heather Mahalik: Earn The Tool

Heather Mahalik is the Senior Director of Digital Intelligence at Cellebrite and a Senior Instructor, author and course lead for FOR585: Smartphone Forensic Analysis In-Depth . To say that digital forensics is central to Heather's life is quite an understatement. Heather has worked on high-stress and high-profile cases, investigating everything from child exploitation to media associated with terrorism. She has helped law enforcement, eDiscovery firms, military, and the federal government extrac...

Jan 13, 202038 min

#079 – Mari DeGrazia: Not Just One Technology

Mari DeGrazia is a Senior Vice President in the Cyber Risk practice of Kroll, a division of Duff & Phelps. Over the course of a 12-year career in the computer industry, Mari has become a leader within the digital forensics community. Mari joined Kroll from Verizon Enterprises where she served as Case Lead on various network intrusion and data breach investigations. Mari is a strong believer in giving back to the forensic community and has written and released numerous programs/scripts, two o...

Jan 06, 202045 min

#078 – Nadean Tanner: Boil It Down

When my 7-year-old introduced me to his second-grade class, he put it best: "My Mom teaches the good guys how to keep the bad guys out of their computers. She has a blue lightsaber." - Nadean Tanner Nadean Tanner is the Senior Manager of Technical Education Programs at Puppet . She is responsible for all things product training from working with internal knowledge sources and the instructional design team to produce modern, engaging knowledge assets to delivering online and onsite classroom...

Dec 16, 201945 min

#077 – Frank Downs: Know When To Leave

Frank Downs is the director of cybersecurity practices at ISACA . Frank, a 14-year cybersecurity specialist, graduated with a bachelor’s degree in English from the University of Maryland, after which he promptly joined the US Department of Defense as a subject matter expert, working with computer networks on a daily basis. Realizing that English and cybersecurity were two very different concepts, he proceeded to obtain a master’s degree in cybersecurity from UMBC, after a pit stop at Johns Hopki...

Dec 10, 201948 min

#076 – Lesley Carhart: You’ve Got to Play the Game

Lesley Carhart is a Principal Threat Analyst at the Threat Operations Center at Dragos . She is recognized as a subject matter expert in cybersecurity, incident response, and digital forensics, regularly speaking at conferences and universities. She has spent the last 11 years of her 20+ year IT career specializing in information security, with a heavy focus on response to nation-state adversary attacks. Prior to Dragos, she was the incident response team lead at Motorola Solutions, performing d...

Sep 30, 201945 min

#075 – Brian Martin (Jericho): The Hacker Mindset

Brian Martin (a.k.a. Jericho) has been poking about the hacker and security scene for over 22 years, building valuable skills such as skepticism and anger management. As a hacker-turned-security whore, Jericho has a great perspective to offer an unsolicited opinion on just about any security topic. A long-time advocate of advancing the field, sometimes by any means necessary, he thinks the idea of ‘forward-thinking’ is quaint; we’re supposed to be thinking that way all the time...

Sep 23, 201948 min

#074 – Bill Conner: You Cannot Have Privacy Without Security

Bill Conner is the President and CEO of SonicWall . Bill has lead key divisions of AT&T, took Nortel into the $9 billion acquisition of Bay Networks, worked to secure digital identities with Entrust, and brought secure communications and privacy from the consumer to the enterprise through mobile and cloud with Silent Circle. Bill also created and hosted “Hacked” for SiriusXM’s business radio. He has been recognized with several awards including Marketing Computers “Marketer of the Year,” Tec...

Sep 16, 201943 min

#073 – Bernard Harguindeguy: Identity Is The Keystone

Bernard Harguindeguy is the Chief Technology Officer & General Manager Intelligence from Ping Identity . Bernard joined Ping in June 2018 through the acquisition of Elastic Beam, where he was the CEO and founder. His work at Elastic Beam revolutionized the use of AI to protect API infrastructures from cyber attacks and deliver deep insight into API access and usage. Bernard earned an MS in Engineering Management from Stanford University and a BS in Electrical Engineering from the University ...

Aug 19, 201940 min

#072 – Vinny Sakore: This Was Crime

Vinny Sakore joined the NetDiligence team in 2017 as their Chief Technology Officer. Prior to joining NetDiligence Vinny served as Verizon’s HIPAA Security Officer. His previous experience includes stints as Chief Technology Officer for two healthcare technology companies. Vinny is a featured speaker nationally and internationally on the topics of Cyber Risk, Mobile Technology, and Information Security. He is a regular presenter at organizations and events such as the NetDiligence Cyber Risk for...

Jul 08, 201939 min

#071 – Renaud Deraison: Complexity Breeds Insecurity

Renaud Deraison is known in the global security community as the father of the Nessus vulnerability scanner. His original creation, Nessus , celebrated its 15th anniversary in 2013 and is considered the de facto standard for vulnerability scanning worldwide. Renaud co-founded Tenable Network Security in 2002. As Chief Technology Officer, he drives product strategy and development. Before Tenable, Renaud was the primary author of the Nessus vulnerability scanner – releasing the first version of N...

May 27, 201927 min

#070 – Lorrie Cranor: Help Open The Doors

Lorrie Faith Cranor , IEEE Fellow , is the Director and Bosch Distinguished Professor in Security and Privacy Technologies of CyLab and the FORE Systems Professor of Computer Science and of Engineering and Public Policy at Carnegie Mellon University . She also directs the CyLab Usable Privacy and Security Laboratory (CUPS) and co-directs the MSIT-Privacy Engineering masters program. In 2016 she served as Chief Technologist at the US Federal Trade Commission, working in the office of Chairwoman R...

May 20, 201929 min

#069 – Ben Johnson: Break Down The Problems

Ben Johnson is CTO and co-founder of Obsidian Security . Prior to founding Obsidian, he co-founded Carbon Black and most recently served as the company’s Chief Security Strategist. As the company’s original CTO, he led efforts to create the powerful capabilities that helped define the next-generation endpoint security space. Prior to Carbon Black, Ben was an NSA computer scientist and later worked as a cyber engineer in an advanced intrusion operations division for the intelligence c...

May 06, 201951 min

#068 – Deborah Blyth: Security Is Everybody’s Job

Deborah Blyth is the Chief Information Security Officer (CISO) State of Colorado, Governor’s Office of Information Technology . In August 2014, Deborah Blyth became the state’s new CISO, bringing a diverse 25-year technology background including 14 years of information security experience. As the CISO, she serves as the point of contact for all information security initiatives in Colorado, informing the Secretary of Technology & Chief Information Officer and executive agency leadership...

Apr 29, 201945 min