Why is SIEM an area of unease for so many security officers?

To make detection and response successful, we need tools capable of upscaling the practitioners as well as equipping them to be successful. We need tools we can rely on.

In today's episode, we had an inspiring conversation with J Wolfgang Goerlich, Advisory CISO at Cisco Secure. We discussed how trust is a determinant factor in building the security tools of the future, why so many CISOs lost trust over SIEMs and what we can do to rebuild it.

Topics discussed in this episode:

• Wolf's role as advisory CISO.

Securing the environment and scaling operations of the world's leading streaming entertainment service is massive.

Srinath Kuruvadi is the head of cloud infrastructure security at Netflix. Before Netflix, he spent more than 15 years building security solutions and leading teams at Google, Facebook, Snapchat, Lyft, and Mapbox.

In today's episode, he shares how his leadership skills have evolved over time, where he puts his focus when approaching infrastructure security, and what he believes are the key ingredients any security team should have today.

Topics discussed in this episode:

• How Srinath got his start in security and landed as head of infrastructure cloud security at Netflix 

How does anything scale as a leader? 

For today's guest, security has always been a puzzle in which the only variable we do get to control is time; specifically, all the decisions that enable us to control how fast we detect threats.

Am I going to be agile with this tool? How fast can I deploy detection if something happens today? How many hours is it going to take me to understand if it happens again or if it's still happening? 

These are some of the questions Matt Jezorek likes to ask himself. Matt is the Vice President of Security and Platform Abuse at Dropbox,  an Information Security Executive with multinational fortune 50 experience who can think like an attacker and still speak to the business. 

Topics discussed in this episode:

• Matt's background and his number one motivator: "taking care of his family"

Risk management has shifted from a traditional mindset to an integrated view, where engagement of all departments across an enterprise is crucial to address threats properly.

In today's episode we sat down with Miguel Viana from Talkdesk to discuss how security teams provide guidance to identify vulnerabilities and how risk management processes evolve in a fast-paced growing team.

Topics discussed in this episode:

• Miguel Viana's background in the security industry

"The people who actually work with me (not for me), do their jobs better"

Gusto is a People Platform and as the Chief Information Security Officer, Fredrick Lee (AKA Lee) knows company value starts with your employees. If you don't take care of your employees, you can't take care of your customers.

Being a great leader is not only about inspiring your team and making them want to do more but also, and more importantly, is about transparency and building trust.

Tune in into today's episode for a master class on how to lead a security organization from the trenches.

Topics discussed in this episode:

• What makes a great security leader

Not so long ago security was 'more manual' and therefore, riskier. Important systems would drift in their configuration, people would go on and change things manually.

Over the past decade, there has been a shift from tools that were doing infrastructure as code to immutable infrastructure. Technology now allows you to be updated, gives you the ability to retrain, and have a repeatable process. 

Gilbert Martin is the Head of Cloud Security at OutSystems and a big believer in taking a developer first approach to a lot of the things that we do in security. One of those is creating an image pipeline.

In today's episode, Gilbert walks us through the idea of how using the right tools can help you promote better cloud infrastructure security.

Topics discussed in this episode:

• Gilbert’s background in security.

Cyber security is difficult. It's asymmetric and the advantage falls on the attacker side.

When Omer Singer realized this, he felt inspired to join the military service in Israel. After what he saw by being on the offensive side, moving to the defense was challenging. How would he reconcile both sides of the same coin? 

Omer Singer is now Head of Cyber Security Strategy at Snowflake and in this episode, he shares what was the game changing approach that made him flip into doing detection. 

Listen to Omer for great insights and advice on how to break into today's data driven cyber security industry.

Topics discussed in this episode:

• Omer's beginnings and background in penetration testing.

Cassio Goldschmidt is the Senior Director and CISO at ServiceTitan. Awarded for his leadership in cyber security, he has over 20 years of experience in various technology companies. He has been a speaker at the most respected international conferences and even helped improve the security integrity of Brazil's voting system. 

In today's episode, Cassio shared unique insights on the importance of bringing the right people for your company needs, whether you are a startup or a fortune 500. 

Who is best for what? When is the right time for outsourcing? What kind of experts should you bring to your team in the beginning? We asked Cassio these questions and also dove into leadership, decision making, and what the future demands for security teams will be.

Topics discussed in this episode:

• How Cassio got into security and became a security leader.

'Don't make assumptions. Ask the question.'

That's what today’s guest advises to her team on how to differentiate what's normal from abnormal in an evolving threat environment.

Cynthia Moore is the Senior Director of Information Security at BlackLine but she started out in infrastructure operations building telecoms systems. Coming from a non-traditional security background has given Cynthia a true leverage and the versatility not only to better empathize with clients' needs but also to speak their language.

In today's episode, you will get to understand the mindset of a great security leader and learn her secret recipe on how to encourage teams to turn 'impossible' problems into possible outcomes.

Topics discussed in this episode:

• The biggest differences in running security for Disney and BlackLine.

Today's guest shared an eye-opening definition: "Application security is an evolving narrative. It's all about collaborating and interacting with the people building the business."

When Ty Sbano started, application security wasn't really called application security. He was fortunate enough to be one of the early folks that had a formal degree in information technology with a focus on security from Penn State University.

From JP Morgan to Capital One to the startup field, Ty collects over 15 years of experience in security. Today, he is Chief Trust and Security Officer at Sisense and he sat down with us to discuss all things AppSec, how to build early, robust security teams, and how to lead with empathy in an evolving agile environment.

Topics discussed in this episode:

• Ty’s background in the financial/fintech industry and his current focus on data science and the conversions of security.