Phillip Wylie Show

Justin Elze: A CTO's Offensive Security Insights


Listen Later

About the Guest:

Justin Elze is the CTO of TrustedSec, a highly acclaimed cybersecurity company. With over 14 years of industry experience, Justin is an expert in the field of offensive security, especially in the domain of red teaming and penetration testing. His extensive knowledge extends over several facets of cybersecurity, from system engineering to research. At TrustedSec, he also oversees the red team and research team, showcasing a driven career that advanced from hands-on technical roles to strategic leadership.


Episode Summary:

In this insightful episode of the cybersecurity-focused podcast, we have the pleasure of welcoming Justin Elze, the Chief Technology Officer of TrustedSec. The conversation dives deep into the world of offensive security, balancing technical expertise with leadership, and the evolution of penetration testing and red teaming in the dynamic cybersecurity landscape.

The episode kicks off with host Phillip Wylie introducing Justin Elze and acknowledging his substantial experience in cybersecurity and defensive security. As they delve into the discussion, Justin shares his origin story, detailing his journey from IRC beginnings and computer repair to ascending the ranks in the cybersecurity realm. The conversation steers towards various career tips for aspiring cybersecurity professionals, touching upon certifications, the art of interviewing, and the importance of having a diverse skill set. Also discussed are current trends and future directions in offensive security, such as assume breach assessments, red team specialization, and purple team operations.


Key Takeaways:

  • Experience in IT prior to entering offensive security is invaluable for understanding business processes and applying cybersecurity measures effectively.

    • For those looking to break into cybersecurity, certifications such as OSCP and specialized courses can offer a significant edge.

      • Purple team operations are pivotal for organizations to develop robust defenses and improve upon the insights gained from offensive security assessments.

        • Cultural shifts, such as the move towards more assume breach assessments, indicate the evolving strategies in red teaming and cybersecurity testing.

          • Although specializations can be advantageous, they should be balanced with broader skills to remain adaptable in the swiftly changing cybersecurity landscape.


          • Notable Quotes:

            "Once you get to a certain point of doing this, you really just need to focus on, hey, I found a really good class on AWS, found a really good class on enumeration."

            "You kind of need to look at where you are today, where things you think will be in five years."

            "The report is really what you're going to digest… Making sure that they [cybersecurity firms] are there to kind of support you after you have the report to digest it at different levels that you need."


            Resources:

            https://twitter.com/HackingLZ

            https://www.linkedin.com/in/justinelze/

            TrustedSec website: trustedsec.com


            ...more
            View all episodesView all episodes
            Download on the App Store

            Phillip Wylie ShowBy Phillip Wylie

            • 4.9
            • 4.9
            • 4.9
            • 4.9
            • 4.9

            4.9

            17 ratings


            More shows like Phillip Wylie Show

            View all
            SpyCast by SpyCast

            SpyCast

            1,509 Listeners

            Defensive Security Podcast - Malware, Hacking, Cyber Security & Infosec by Jerry Bell and Andrew Kalat

            Defensive Security Podcast - Malware, Hacking, Cyber Security & Infosec

            366 Listeners

            Hacked by Hacked

            Hacked

            183 Listeners

            CyberWire Daily by N2K Networks

            CyberWire Daily

            1,009 Listeners

            Smashing Security by Graham Cluley & Carole Theriault

            Smashing Security

            312 Listeners

            Click Here by Recorded Future News

            Click Here

            415 Listeners

            Darknet Diaries by Jack Rhysider

            Darknet Diaries

            7,913 Listeners

            Modern Wisdom by Chris Williamson

            Modern Wisdom

            3,815 Listeners

            CISO Series Podcast by David Spark, Mike Johnson, and Andy Ellis

            CISO Series Podcast

            189 Listeners

            My First Million by Hubspot Media

            My First Million

            2,624 Listeners

            All-In with Chamath, Jason, Sacks & Friedberg by All-In Podcast, LLC

            All-In with Chamath, Jason, Sacks & Friedberg

            9,236 Listeners

            Cyber Security Headlines by CISO Series

            Cyber Security Headlines

            127 Listeners

            Risky Bulletin by risky.biz

            Risky Bulletin

            43 Listeners

            Hacker And The Fed by Chris Tarbell & Hector Monsegur

            Hacker And The Fed

            167 Listeners

            The Peter Zeihan Podcast Series by Peter Zeihan

            The Peter Zeihan Podcast Series

            401 Listeners