Cybersecurity Mentors Podcast

Send us Fan Mail and we can reply directly!

Can you spend nearly two decades in one career and still successfully make the jump into cybersecurity?

Chris Horner did exactly that.

Before becoming a social engineer/penetration tester and vCISO, Chris spent nearly two decades working in banking. In this episode, he joins John to talk about how he made the transition into cybersecurity, what helped him land his first opportunity, and why the experience from your previous career doesn't disappear just because you're changing industries.

Chris shares how networking became a "long-term job interview," why following up and showing people what you did with their advice matters, and what it was really like stepping into his first professional penetration-testing role.

We also dig into Chris's specialty in social engineering, including how professional phishing campaigns are built, why understanding the client's business matters, and the story of a HIPAA-themed phishing test where more than 80 people submitted their credentials.

We discuss:

• Transitioning into cybersecurity later in your career
• Building relationships instead of simply "networking"
• Turning mentors and professional connections into long-term relationships
• Developing the mindset of a penetration tester
• What labs don't prepare you for in your first cybersecurity job
• The importance of maintaining a beginner's mindset
• How to evaluate the company interviewing you
• Social engineering, phishing, and OSINT
• Safe ways to develop social-engineering skills
• Transferable skills from previous careers
• Why communication and business knowledge matter in cybersecurity

Connect with Chris:

Chris Horner on LinkedIn

Triaxiom Security

Chris's article, "The vCISO: Security Leadership That Grows With Your Business": Read Chris's vCISO article

Resources Mentioned

TCM Security Practical OSINT Research Professional (PORP): PORP Certification

BSides Greenville

Come hang out with us in the Cybersecurity Mentors Skool community. It’s free to join.

Send us Fan Mail and we can reply directly!

What separates great talent from a great résumé, and how can cybersecurity professionals make themselves impossible to ignore?

In this episode of the Cybersecurity Mentors Podcast, John sits down with Mike Sarraille, retired Navy SEAL, leadership expert, Chief Talent Officer at OVERWATCH, and co-author of The Talent War.

Mike shares lessons from Special Operations and high-performing organizations about how we can rethink hiring, identify potential, build stronger teams, and stand out in an increasingly competitive job market.

We discuss:

• Why experience alone doesn’t predict future performance
• “Hire for character, train for skill”
• The character attributes that predict high performance
• Why likability and “culture fit” can lead to bad hires
• How behavioral interviews, simulations, and case studies can reveal how candidates actually think
• What hiring managers should look for in cybersecurity talent
• Why hiring is only the beginning of developing great people
• How candidates can demonstrate drive, curiosity, humility, and preparation
• Why job seekers should interview the company too
• How to make yourself impossible to ignore in a competitive job market
• How AI is changing hiring and the workplace
• Why Mike views AI as a force multiplier

Whether you’re a cybersecurity leader building a team, a hiring manager looking for better ways to identify talent, or someone trying to break into cybersecurity, this conversation offers practical lessons for finding, developing, and demonstrating talent.

Connect with Mike:

Mike Sarraille on LinkedIn
https://www.linkedin.com/in/michaelsarraille

Mike Sarraille
https://mikesarraille.com/

Resources Mentioned

OVERWATCH Mission Critical
https://weareoverwatch.com/

The Talent War: How Special Operations and Great Organizations Win on Talent
https://talentwargroup.com/the-talent-war/

Talent War Group
https://talentwargroup.com/

Come hang out with us in the Cybersecurity Mentors Skool community. It’s free to join.

Send us Fan Mail and we can reply directly!

What does the future of cybersecurity look like, and how can the next generation prepare for it?

In this episode of the Cybersecurity Mentors Podcast, John sits down with Cecilia Marinier of RSAC to talk about cybersecurity innovation, emerging technology, career opportunities, and developing the next generation of cybersecurity professionals.

Cecilia shares her journey from studying political science and psychology and working in national security to helping lead RSAC’s Innovation and Scholars programs.

We discuss:

• Why cybersecurity needs people from many different backgrounds
• Why networking and community are so important for breaking into cybersecurity
• What makes a cybersecurity startup truly innovative
• How AI is changing the cybersecurity market
• RSAC Innovation Sandbox, Innovation Showcase, and Launch Pad
• How startups can differentiate themselves in a crowded market
• Why adaptability and the ability to pivot matter
• The RSAC Security Scholars program and College Day
• How students can gain experience and build relationships in cybersecurity
• The impact mentors can have on someone’s career
• How AI may change entry-level cybersecurity jobs
• Why cybersecurity professionals should start learning and experimenting with AI now
• Finding the cybersecurity career path that matches your interests and existing skills
• Why the cybersecurity community is one of the industry’s greatest strengths

Cecilia also shares a powerful story about John Strand of Black Hills Information Security offering training and mentorship to someone trying to break into cybersecurity, a great example of what this community can look like at its best.

Connect with Cecilia

Cecilia Marinier on LinkedIn
https://www.linkedin.com/in/cecilia-murtagh-marinier-14967/

Resources Mentioned

RSAC Security Scholar
https://www.rsaconference.com/rsac-programs/security-scholar

RSAC College Day
https://www.rsaconference.com/rsac-programs/college-day

RSAC Innovation Sandbox
https://www.rsaconference.com/rsac-programs/innovation/innovation-sandbox

RSAC Launch Pad
https://www.rsaconference.com/rsac-programs/innovation/launch-pad

RSAC Innovation Showcase
https://www.rsaconference.com/rsac-programs/innovation/innovation-showcase

AppSec Village: Attacking AI – Modern Methodology to Test AI Systems with Jason Haddix
https://www.rsaconference.com/Library/webcast/appsec-village-attacking-ai-modern-methodology-to-test-ai-systems

Cybersecurity Career Guide by Alyssa Miller
https://www.manning.com/books/cybersecurity-career-guide

John Strand / Antisyphon Training
https://www.antisyphontraining.com/instructor/john-strand/

Security BSides
https://bsides.org/

AFA CyberPatriot
https://www.uscyberpatriot.org/

Come hang out with us in the Cybersecurity Mentors Skool community. It’s free to join.

Send us Fan Mail and we can reply directly!

Learning cybersecurity does not mean figuring everything out on your own.

In this episode of the Cybersecurity Mentors Podcast, Steve and John explain why following walkthroughs, tutorials, and expert examples is not cheating—it is one of the most effective ways to build practical cybersecurity skills.

Just like musicians, athletes, artists, and apprentices, cybersecurity professionals improve by watching others, repeating proven techniques, and putting in the reps.

We discuss how to move beyond simply copying instructions by asking why each step matters, predicting what comes next, researching what you do not understand, and documenting what you learn.

We also share practical walkthrough resources for:

• Offensive security and capture-the-flag challenges
• SOC analysis and Splunk investigations
• Digital forensics and incident response
• Threat hunting
• GRC and cybersecurity risk assessments

You do not need to create every project or lab from scratch. Follow someone who has already done it, learn the process, make it your own, and eventually help others do the same.

Mimicry is not the opposite of mastery. It is often the first step toward it.

Come hang out with us in the Cybersecurity Mentors Skool community. It’s free to join.

Send us Fan Mail and we can reply directly!

The cybersecurity profession is changing faster than ever.

In Part 2 of our breakdown of the 2026 ISSA Life and Times of Cybersecurity Professionals Report, we explore what 380 IT and cybersecurity professionals say about the biggest challenges facing the industry today.

We discuss:

• Why cybersecurity and IT must work together
 • Is the cybersecurity skills shortage real?
 • How organizations should build better talent pipelines
 • Why AI is a force multiplier—not a replacement
 • The evolving role of today's CISO
 • The leadership, business, and communication skills that matter most

Whether you're trying to break into cybersecurity, advance your career, or become a future security leader, this episode is packed with practical insights you can apply immediately.

Come hang out with us in the Cybersecurity Mentors Skool community. It’s free to join.

Send us Fan Mail and we can reply directly!

Is cybersecurity still a great career in 2026?

In this episode of the Cybersecurity Mentors Podcast, we break down the latest 2026 ISSA Life and Times of Cybersecurity Professionals report and compare the research to our own experience leading enterprise cybersecurity teams.

Based on feedback from 380 IT and cybersecurity professionals, we discuss:

• The best advice for breaking into cybersecurity
 • Why networking matters more than certifications alone
 • The growing workload facing security teams
 • Stress, burnout, and why many professionals have considered leaving the field
 • The leadership and culture that separate great security teams from struggling ones

If you're trying to land your first cybersecurity job, grow into leadership, or understand what the career really looks like behind the scenes, this episode is for you.

Come hang out with us in the Cybersecurity Mentors Skool community. It’s free to join.

Send us Fan Mail and we can reply directly!

Everyone is asking the same question:

"Will AI replace cybersecurity jobs?"

After working with AI every day in a real enterprise security program, my answer may surprise you.

In this episode, I explain why AI is actually creating more work for cybersecurity teams—not less.

We discuss:

• Why vulnerability management is exploding 
• How AI is accelerating vulnerability discovery 
• Why AI governance is becoming one of the fastest-growing areas in cybersecurity 
• How security operations (SOC) teams are actually using AI today 
• Why AI is a force multiplier—not a replacement 
• The cybersecurity skills that will become even more valuable over the next few years 

If you're worried about AI replacing your career—or you're trying to break into cybersecurity—this episode will help you understand where the real opportunities are.

Come hang out with us in the Cybersecurity Mentors Skool community. It’s free to join.

Send us Fan Mail and we can reply directly!

Trying to break into cybersecurity but not sure whether you should pursue a SOC Analyst role or a GRC (Governance, Risk, and Compliance) position?

In this episode of The Cybersecurity Mentors Podcast, we break down the differences between SOC and GRC careers, the skills needed for each path, and how to determine which one fits your strengths, interests, and long-term goals.

Whether you're a career changer, recent graduate, IT professional, or someone trying to land your first cybersecurity job, this episode will help you make a more informed decision about your future.

Tell us in the comments:

If you had to choose today, would you pick SOC or GRC, and why?

Come hang out with us in the Cybersecurity Mentors Skool community. It’s free to join.

Send us Fan Mail and we can reply directly!

Too many people are getting bad advice about cybersecurity careers, and it’s hurting their chances of getting hired.

In this episode of The Cybersecurity Mentors Podcast, we break down some of the biggest myths in cybersecurity today, including:

• “Cybersecurity is entry-level”
 • “AI is replacing SOC analysts”
 • “You need to know everything before applying”
 • “Cybersecurity pays six figures immediately”
 • “Technical skills are all that matter”
 • “LinkedIn networking is pointless”
 • “Cybersecurity influencers give realistic advice”

If you're trying to break into cybersecurity or grow your career, this episode will help you focus on what truly matters.

Come hang out with us in the Cybersecurity Mentors Skool community. It’s free to join.

Send us Fan Mail and we can reply directly!

In this special Q&A episode of The Cybersecurity Mentors Podcast, we answer REAL questions submitted directly by our community about breaking into cybersecurity in 2026.

We cover:

• How to become employable in your first 90 days 
• The best entry-level IT and cybersecurity roles 
• What hiring managers ACTUALLY look for 
• Home labs that recruiters care about 
• CompTIA vs GIAC certifications 
• MBA vs technical degrees for future CISOs 
• Common mistakes junior analysts make 
• Networking, mentorship, and career growth 
• What surprised us most working in cybersecurity 
• How to stand out when everyone says they want “experience” 

We also share personal stories from our own careers, lessons learned, and advice we wish someone gave us earlier.

If you're trying to break into cybersecurity, grow your career, or avoid common mistakes, this episode is for you. 

Come hang out with us in the Cybersecurity Mentors Skool community. It’s free to join.