Phillip Wylie Show

By Phillip Wylie

Join Phillip Wylie Show host Phillip Wylie as he and his guests discuss the intriguing and ever-expanding field of cybersecurity, including topics from the offensive security side to the defensive and... more

4.9

1818 ratings

Download on the App Store

Download on the App Store

Get it on Google Play

FAQs about Phillip Wylie Show:

How many episodes does Phillip Wylie Show have?

The podcast currently has 174 episodes available.

Phillip Wylie Show episodes:

April 25, 2024 Be Fearless Online: Vivek Ramachandran a Year of Browser Security Innovation
About the Guest:
Vivek Ramachandran is the founder of SquareX and a veteran in the cybersecurity industry with over 20 years of experience in building security products and finding vulnerabilities in security systems. His entrepreneurial experience spans over a decade, during which he has built wireless monitoring solutions, pentesting gadgets, and cloud-powered lab environments. Before SquareX, he founded Pentester Academy, a cloud-based cybersecurity training startup that was successfully acquired. Vivek also discovered the infamous Caffe Latte Attack and has authored multiple books and research papers on offensive cybersecurity techniques. He has spoken at top conferences like DEFCON and BlackHat over the years.
Episode Summary:
In this Be Fearless episode, hosted by Phillip Wylie and sponsored by Square X, the conversation delves into the intricate world of cybersecurity with the spotlight on browser-based threats and the need for innovative solutions. Vivek Ramachandran, a pioneer in cybersecurity training and the mastermind behind Square X, joins the discourse to share insights from his extensive experience in the domain.
The episode unravels the complexities of securing web browsing in an enterprise landscape predominantly ruled by browser usage. Vivek critiques the current reliance on secure web gateways (SWGs) and emphasizes the limitations they present in the face of agile and sophisticated attacks. The dialogue shifts to a discussion on the superiority of browser-native solutions, advocating for their adoption over outdated cloud-based proxies, and underscoring their fundamental advantage of being application context and user interaction aware.
Key takeaways from the episode include the importance of understanding the threat landscape shaped by browser-centric workflows, recognizing the shortcomings of existing secure web gateways, and appreciating the merits of browser-native security solutions that offer rich data and immediate mitigation capabilities.
Key Takeaways:
* Browser-native security solutions provide more comprehensive protection compared to traditional secure web gateways, which lack application context and user interaction awareness.
* Browser-native security solutions built into the browser can offer better visibility and immediate mitigation against threats.
* The enterprise browser market, featuring companies like Island and Talon, focuses on a niche problem and might not be comprehensive in addressing secure browsing needs.
* The adoption of new security technology in enterprises sometimes faces friction due to reliance on analyst reports and the market's resistance to change.
Notable Quotes:
* "The browser has become the most important application used in the enterprise today." - Vivek Ramachandran
* "The next generation of attacks are starting to live and die inside the browser." - Vivek Ramachandran
* "Enterprise browsers solve a very small problem…but don't actually do anything substantial beyond that." - Vivek Ramachandran
* "I'm hoping [Square X] can disrupt this… industry for the better." - Vivek Ramachandran
* "2025 is actually going to be like a holy war… taking… disruptive [solutions]… and seeing how we can have the industry adopt this." - Vivek Ramachandran
Resources:
Get your free SquareX Chrome plugin: ⁠⁠http://sqrx.io/pw_x⁠⁠
⁠⁠https://www.linkedin.com/company/getsquarex/⁠⁠
⁠⁠https://twitter.com/getsquarex⁠
⁠⁠https://www.instagram.com/getsquarex/sible.
...more
35min
April 23, 2024 Ryan Pullen: Insights from a Cybersecurity Pro and TED Talk Featured Speaker
About the Guest:
Ryan Pullen is a cybersecurity expert based in the UK who specializes in offensive cybersecurity pathways. With a unique entry into the field through a job found on Gumtree, Ryan has carved a formidable career that moved from defensive roles into offensive cybersecurity and later involved in adversarial simulations and penetration testing. He has extensive experience in incident response and has worked on notable projects, including those in collaboration with Stripe OLT, where he is now a board member. Ryan has been instrumental in the evolution of cybersecurity since the mid-2000s, bringing a wealth of knowledge, especially in SOC operations and Microsoft security practices.
Episode Summary:
In this enlightening episode of the Philip Wylie show, Ryan Pullen joins the podcast to share his extensive journey and insights in the cybersecurity world. Ryan delves into the progression of cybersecurity practices over the past decade and offers invaluable advice to those looking to start or advance in the industry. From discussing the importance of networking to the nuances of job hunting in the cyber sector, Ryan provides a rich overview of technical and career-developing strategies.
Ryan emphasizes how persistence and self-improvement play crucial roles in both penetrating the cybersecurity job market and excelling within the field. He illustrates this point through his own 'hacker origin story', showcasing the benefits of seizing the right opportunities and the importance of continuous learning and networking. Additionally, the conversation covers resources for aspiring SOC analysts and the value of understanding an offensive cybersecurity mindset even in defensive roles. The takeaway is clear – whether you're stepping into red teaming, SOC operations, or pen testing, embracing an inquisitive attitude and expanding your network are key.
Key Takeaways:
The pathway to a cybersecurity career is varied, and taking opportunities as they come can be pivotal in finding success.
Networking is vital in the cybersecurity industry, as personal connections often lead to job opportunities and growth.
Understanding challenges from an offensive cybersecurity mindset is beneficial for roles across the security spectrum.
For those looking to enter the field, platforms like TryHackMe, HackTheBox, and Let's Defend offer valuable hands-on experiences.
Becoming a public speaker in the cybersecurity realm can open up new opportunities and serve as an effective way to give back to the community.
Notable Quotes:
"Networking is key, especially for people trying to get their foot on the ladder."
"My journey starts with, well, I was playing with this and this was interesting to me and I didn't want to put it down."
"The more you do anything, the better you're going to get."
"For anyone looking to start, have a go at all of the online kind of labs and free tools."
Resources:
LinkedIn (https://www.linkedin.com/in/ryan-pullen/)
TryHackMe (https://tryhackme.com)
HackTheBox (https://www.hackthebox.eu)
Let's Defend (https://www.letsdefend.io/)
Kusto Detective Agency (https://detective.kusto.io/)
...more
32min
April 17, 2024 Huxley Barbee: The Dark Side of Technology
About the Guest:
Huxley Barbee is recognized in the cybersecurity field for his extensive experience in security automation and software engineering. With a professional trajectory spanning over decades, Huxley's path began in high school, where his interest in computers and passion for programming were piqued. Throughout his career, he has significantly contributed to various sectors by emphasizing the defensive aspects of cybersecurity, scaling from hands-on firewall configurations to leading consulting practices for major corporations. As an advocate for education and collaboration in the InfoSec community, Huxley is also the organizer of BSides New York City, a renowned cybersecurity conference.
Episode Summary:
In this impactful episode of the Philip Wylie show, cybersecurity expert Huxley Barbee delves into his journey within the cybersecurity landscape, starting from the halls of his high school to the cusp of modern security automation. Listeners will be drawn into an engaging narrative that interleaves personal anecdotes with professional wisdom, highlighting pivotal moments that shaped Huxley's career.
The conversation with Phillip Wylie covers a multitude of insights, from the importance of programming knowledge in cybersecurity to the evolution of security tools and practices. Huxley underscores the need for hands-on learning and emphasizes the significance of understanding system fundamentals regardless of automation advances. The dialogue evolves to address current trends and challenges in security, particularly focusing on the nuanced utilization of AI in cybersecurity practices.
Key Takeaways:
In-depth programming knowledge can significantly enhance a cybersecurity professional's ability to understand, reverse engineer, and secure applications.
Security automation should incorporate human-driven decision points to mitigate potential risks associated with complete automation.
The cybersecurity field is evolving with new challenges, including the integration of AI and the risk management associated with older technologies that have gained new exposure, like OT systems.
Building security tools requires adopting best practices from software engineering to ensure long-term maintainability and support.
AI in cybersecurity poses an array of unpredictable outcomes and thus should be approached cautiously with risk mitigation or acceptance strategies.
Notable Quotes:
"What's most interesting about that role was I was able to combine my software engineering background with my security background and bring it all together."
"You need to understand - you are a programmer, right? Yes, you're working in the security fields, you're part of the security domain, but you are a programmer."
"One of the principles that I learned from leading that consulting practice is the goal. Your goal as a security engineer, somebody that's doing automation should never be 100% automation."
"Every single developer has done this because I'm doing this in development. It's fine. I'm just trying to get to work. When we go into production, we'll go ahead and fix that later."
"AI has a very important role to play going forward. I would not run production environments on anything that uses AI dependencies right now."
Resources:
* https://www.linkedin.com/in/huxleybarbee/
* https://twitter.com/huxleybarbee
* Infosec Exchange (Mastodon instance): @Huxley at Infosec Exchange
* BSides New York City: BSides NYC
...more
43min
April 09, 2024 Ricky Allen: The Evolution of Cybersecurity Challenges
About the Guest:
Ricky Allen is a seasoned cybersecurity expert and a key player at CyberOne, where his expertise in cybersecurity strategy and innovation is instrumental. With a rich professional history dating back to the late 1990s, he has witnessed and contributed to the evolution of the cybersecurity industry, working with companies like EDS, PricewaterhouseCoopers, and founding member status at Critical Start. His trajectory from penetration testing to defensive cybersecurity strategies highlights his comprehensive understanding of the field. Currently, he spearheads efforts in consulting, advisory work, and AI development at CyberOne, leading the charge in tackling today's sophisticated cybersecurity challenges.
Episode Summary:
In this insightful episode, Phillip Wylie sits down with Ricky Allen, a prominent figure from CyberOne, to discuss the dynamic world of cybersecurity as we enter 2024. The conversation delves into the current challenges and advancements within the sector, exploring topics such as sales strategies, budgeting hurdles in cyber defenses, and the evolving landscape of risks and threat responses.
This discussion sheds light on the transition from offensive security approaches to more comprehensive defensive strategies. Ricky shares his extensive experience, from his early roots in IT and security to his current role in shaping cybersecurity frameworks and AI applications. The conversation also touches on the importance of continuous learning in the industry and provides career guidance for aspiring cybersecurity professionals.
Key Takeaways:
Cybersecurity remains a top concern with ransomware as a multi-billion dollar industry, making budget justification and protection efforts more critical than ever.
The path from red team tactics to blue team strategies is crucial for a rounded understanding of security and effective defense mechanisms.
Modern cybersecurity operations must consider and validate even low-level threats, as they can contribute to significant breaches when combined.
Continuous education and personal initiative in learning new technologies and methodologies are key to staying relevant in the cybersecurity field.
Governance and cautious implementation of AI are necessary to harness its potential securely within organizational frameworks.
Notable Quotes:
"We have to understand the attacker's mindset. Understand how I could use this to really explain what your situation was."
"It's sometimes impossible, is the defender's job. We're always keeping up. We're always looking for that next."
"I'm excited about the next generation coming in… but often they say, 'Well, where can I get a job?' And that's the hard part."
"We've solved this… but yet to fully apply [zero trust] the way they should be."
"I'm trying to look outwards and say, what are those biggest plans? What are we working on? What are the initiatives that most listeners actually will be doing this year?"
Resources:
https://www.linkedin.com/in/rickyaallen/
https://www.linkedin.com/company/cyberonesecurity/
http://www.cyberonesecurity.com/
...more
36min
April 02, 2024 Matt Johansen: Vulnerability and Mental Health in Cybersecurity.
About the Guest:
Matt Johanson, known as Matt J, is a seasoned cybersecurity professional and an active content creator within the industry. With a rich background that spans across various facets of cybersecurity, Matt's expertise ranges from practical experience in offensive security to leadership roles in software security. His journey began with computer programming in high school, followed by a computer science degree and an influential senior seminar focused on cybersecurity, taught by a SANS instructor. Matt's professional career kicked off with engagements in penetration testing, and he eventually played an instrumental role in building WhiteHat Security's threat research team. At present, Matt holds the title of Head of Software Security at Reddit, where he brings his extensive knowledge and experience to the forefront of protecting one of the internet's most significant community platforms.
Episode Summary:
In this intriguing episode of The Philip Wylie Show, host Philip Wylie engages in a compelling conversation with cybersecurity connoisseur Matt Johansson. Listeners are drawn into the dialogue as Matt shares the narrative of his origin story, chronicling his early forays into hacker culture, his educational pursuits, and the serendipitous events involving industry notables that shaped his career trajectory.
Delving into the intricacies of breaking into and advancing within the AppSec realm, Matt elucidates the accessibility of the field, emphasizing the advantage of readily available learning resources like bug bounty programs and OWASP. Equally crucial, he divulges insights on the evolving landscape of cybersecurity, spotlighting burgeoning areas like threat detection that beckon aspirants.
Key Takeaways:
Matt Johansson's foundational cybersecurity experiences were fostered in the '90s through video game system modding and initial programming courses in high school and college.
Networking and community involvement at hacker conferences like ShmooCon can yield lifelong professional relationships and career opportunities.
AppSec and web app penetration testing present more accessible entry points for breaking into cybersecurity, bolstered by resources such as OWASP and bug bounty programs.
Everyone has valuable experiences to share; beginning content creators should start creating and learning publicly, regardless of initial quality perceptions.
Open dialogue on mental health is vital within the cybersecurity industry, and it's something Matt J actively promotes through his newsletter Vulnerable You and other content mediums.
Notable Quotes:
"…really fortunate timing there." — Matt Johansson regarding his introduction to cybersecurity.
"There is no, like, you're never going to turn the corner and find the room of adults. Like, you're the adults now." — Matt Johansson on career progression and imposter syndrome.
"Look at this. We're, we're not in it. We're, you and I are both in our house right now." — Matt Johansson on the prevalence of remote work affecting the loneliness epidemic.
Resources:
https://twitter.com/mattjay
https://www.linkedin.com/in/matthewjohansen/
Vulnerable U Newsletter https://vulnu.mattjay.com/
https://www.youtube.com/@VulnerableU

...more
40min
March 26, 2024 Michael Kim: DJ turned Red Teamer
About the Guest:
Michael Kim is a seasoned professional in the realm of offensive security, boasting an extensive background in red teaming and penetration testing. Throughout his dynamic career, Michael has contributed his expertise to a variety of organizations, which enables him to offer a unique perspective on cybersecurity. Prior to diving into the security field, Michael followed his passion in music production and DJing for over a decade. His pivot to cybersecurity was catalyzed by the realization that it did not require a formal degree but could be pursued through alternative educational platforms like boot camps. Michael's commitment to continual learning and self-improvement is demonstrated by his approach to gaining new skills and certifications necessary for advancing his career. Currently, he holds the position of red team operator.
Episode Summary:
In this episode of the Philip Wylie Show, host Phillip Wylie engages with Michael Kim, an expert in offensive security, to discuss his unconventional journey into the field of cybersecurity and insights on red teaming and penetration testing. Michael's narrative is not only a testament to career shifts but also an inspiration for individuals looking to pivot into new endeavors later in life. This conversation delves into the intricacies of cybersecurity, the differences between penetration testing, and red teaming, as well as effective learning strategies for those aspiring to break into the security sector.
Michael and Phillip exchange valuable information on the evolution of cybersecurity careers, revealing how passion and dedication can lead to substantial professional growth despite starting from non-technical backgrounds. The episode underscores the importance of a proactive work ethic, the utilization of learning resources like TryHackMe and Hack The Box, and the strategic pursuit of relevant certifications. With Michael's background in music and his proactive approach to personal branding on LinkedIn, listeners are offered a multifaceted perspective on forging a successful career path in offensive security.
Key Takeaways:
Transitioning to cybersecurity does not require a formal degree; alternative education paths like boot camps can be effective.
Red teaming involves stealth and in-depth tactics, unlike the broader approach of penetration testing.
Certifications like OSCP are valuable but not entry-level; it's essential to build a foundation of skills prior to attempting advanced certifications.
Resources such as TryHackMe and Hack The Box Academy are highly recommended for hands-on learning and skill development.
Personal branding and active engagement on professional networks like LinkedIn can significantly benefit one's career advancement.
Notable Quotes:
"I always start with saying… I'm not here to push past, I'm just here because I just want to help out."
"If I can do it, anyone can do it. If you have the passion, if you have dedication, never give up because everybody has a different starting point."
"It's important to have a plan of action. And I feel like from there on, you can build on that plan of action."
"I feel like if everybody does their due diligence to try to research, understand what certs actually help, it'll be easier to navigate [the field]."
"We only go through this once and there'll be times when you look back fondly and like, 'Oh, I used to not be able to do this, but now I can do this really easily.'"
Resources:
https://www.linkedin.com/in/michael-kim-83b0627b/
https://twitter.com/MeterPeter4Eva

...more
40min
March 25, 2024Be Fearless Online: In Browser Malicious File Detection Part 4
About the Guest:
Shourya Pratap Singh is a Principal Engineer at SquareX. He is responsible for building SquareX’s secure and privacy-focused extension, and works on researching methods to counteract web security risks. He has conducted a workshop at Texas Cyber Summit, and his work is being presented at Blackhat Arsenal EU. Before joining ⁠ SquareX⁠, he worked with FinBox (an Indian fintech) where he led a team of brilliant developers and was responsible for building and scaling multiple product lines. He has a bachelor’s degree from IIIT Bhubaneswar and holds a patent. His area of interest includes browser extensions and web application security.

Episode Summary:
In this highly informative episode of the Philip Wylie Show, we dive into the pertinent topic of online security. Together with Shourya Pratap Singh from Squarex, we explore the intricacies of malicious file detection and examine the latest advancements Squarex has incorporated to bolster digital safety. From password-protected archives to deceptive file naming practices, this episode sheds light on the multi-layered defense strategies designed to ward off cyber threats.
Shourya explains how Squarex has evolved its scanning abilities, focusing on zip files and extending its malicious document detection features to manage complex archives, including encrypted and recursively nested zip files. By integrating innovative capabilities directly within the browser, Squarex enables users to seamlessly scan for potential threats without compromising the security of their data. The discussion extends to how Squarex handles password retrieval from email bodies to automate the scanning process, showcasing the company's forward-thinking approach to cybersecurity.
The episode also reveals Squarex's latest feature developments, such as the Download Interceptor, which provides users with additional layers of protection against unwittingly executing harmful downloads.

Key Takeaways:
Squarex has enhanced its platform to detect malicious content within zip files, including password-protected and recursively nested archives.

The download interceptor feature within Squarex offers capabilities such as blocking downloads, ensuring users can review security scans before proceeding.

Squarex can automatically use passwords found in email bodies to scan encrypted files seamlessly, maintaining user convenience without compromising security.

Attackers' methods, such as renaming zip files or using multiple layers of encryption, can be thwarted with Squarex's comprehensive scanning features.

The cybersecurity landscape demands defenders to be always vigilant, as showcased by Shourya's assertion that "attackers have to win only once, but whoever is trying to protect you has to win every time."
Resources:
Get your free SquareX Chrome plugin: ⁠⁠http://sqrx.io/pw_x⁠⁠ ⁠⁠https://www.linkedin.com/company/getsquarex/⁠⁠ ⁠⁠https://twitter.com/getsquarex⁠⁠ ⁠⁠https://www.instagram.com/getsquarex/sible.
...more
21min
March 21, 2024 Be Fearless Online: In Browser Malicious File Detection Part 3
About the Guest:
Jeswin Mathai is the Chief Architect at SquareX. He leads the team responsible for designing and implementing the Infrastructure. Prior to joining SquareX, He was working as the chief architect at INE. He has published his work at DEFCON China, RootCon, Blackhat Arsenal, and Demo Labs (DEFCON). He has also been a co-trainer in-classroom training conducted at Black Hat Asia, HITB, RootCon, and OWASP NZ Day. He has a Bachelor's degree from IIIT Bhubaneswar. He was the team lead at InfoSec Society IIIT Bhubaneswar in association with CDAC and ISEA, which performed security auditing of government portals and conducted awareness workshops for government institutions. His area of interest includes Cloud Security, Container Security, and Web Application Security.
Episode Summary:
In this insightful episode of the Phillip Wylie show, cybersecurity aficionado Jeswin Mathai returns to delve deeper into the intricacies of in-browser malicious file detection. Sponsored by Squarex, this continuation of the "Be Fearless Online" series sheds light on the ever-evolving tactics used by cyber attackers to circumvent traditional antivirus measures. The conversation promises a blend of technical demonstrations and thought-provoking discussion that's integral for professionals and enthusiasts alike.
Jeswin guides us through the dark alleys of cyber threats, starting with reflections on the fundamental evasion techniques like VBA stomping and purging. He invites listeners into a complex world where even simple file renaming or metadata tampering can make malicious documents slip undetected past security checkpoints. Further, Jeswin exposes a fascinating aspect of cybersecurity—"large file attacks"—demonstrating that size does matter in malware detection. With technology that detects such threats in real-time, Jeswin introduces listeners to Squarex's latest advancements, aiming to revolutionize the way we stay safe online.
Key Takeaways:
Attackers are innovating new evasion techniques that fool even the most advanced antivirus systems, like hiding malicious code in macro-enabled files.
Simple changes, such as renaming files and modifying metadata, can significantly reduce the chances of detection by standard security measures.
Large-file attacks are a newer method used by attackers to bypass antivirus systems by embedding malicious code within massive files.
Squarex is at the forefront of combating these advanced threats with in-browser detection technology capable of analyzing and intercepting malicious downloads.
Future updates from Squarex promise even greater capabilities in detecting and dealing with sophisticated in-browser threats.
Notable Quotes:
"In case of large files, let me start with the one XLSM. So this is the one that's having 33 Mb. It will take a few seconds and… it was able to flag it right there."
"Now the moment we try to upload this on Virus Total… it will take a long time."
"So now let's take a look at how Squarex's detection is going to help us."
"With download Interceptor, it's a big win for all of the files out there, whether the file is coming from Google Drive, whether it is Telegram, WhatsApp, Whatnot."
Resources:
Get your free Chrome plugin: ⁠⁠http://sqrx.io/pw_x⁠⁠
⁠⁠https://www.linkedin.com/company/getsquarex/⁠⁠
⁠⁠https://twitter.com/getsquarex⁠⁠
⁠⁠https://www.instagram.com/getsquarex/

...more
31min
March 20, 2024 Cecile Mengue: From Hacked to Hacker
About the Guest:
Cecile Mengue is a dynamic and inspiring penetration tester with a background that diverges from the traditional cybersecurity pathway. Her journey into the realm of cybersecurity was spurred by a personal experience involving cybercrime, which led her to pivot from her degree in criminal justice to pursuing a career in penetration testing. Demonstrating an entrepreneurial spirit and a passion for security, Mengue transitioned from being a victim of hacking to a cybersecurity expert. A notable speaker with an interesting origin story, she presently holds a position as a penetration tester at IBM.
Episode Summary:
In this compelling episode of the Phillip Wylie Show, host Phillip Wylie welcomes an intriguing guest, Cecile Mengue, whose unconventional path to becoming a penetration tester is not just informative but also deeply motivational. The conversation delves into Mengue's unique "hacker origin story," shedding light on her transition from working in juvenile court to unraveling a hacking attempt that targeted her own business.
Cecile Mengue's narrative is one of resilience and tenacity. Having been hacked during her entrepreneurial ventures, Mengue chose to transform her anger into curiosity, leading her down the path of self-taught cybersecurity methods and eventually open-source intelligence (OSINT). She remarkably tracked down her attackers and successfully recovered her losses, a victory that fueled her interest in cybersecurity. Her unconventional entry into pen testing highlights the power of determination and self-directed learning.
Throughout the conversation, Mengue candidly shares the strategies she employed to break into the cybersecurity field, including how she targeted her efforts specifically toward pen testing and leveraged networking to secure her first professional role. The episode is a testament to the idea that one's passion, complemented by strategic skill-building and smart networking, can create pathways to success in the technology industry.
Key Takeaways:
Cecile Mengue's foray into cybersecurity stemmed from her own experience with a hacking incident, leading to a career change from criminal justice to penetration testing.
With determination and self-learning, she tracked down her hacker, which sparked her interest in cybersecurity and ethical hacking.
Focusing on a specific area of interest within cybersecurity, Mengue optimized her learning and job search toward penetration testing, emphasizing the importance of specialization.
Mengue's proactive approach in gaining experience, such as volunteering to help secure local businesses, played a pivotal role in strengthening her resume.
Networking and taking advantage of apprenticeship and entry-level programs can be crucial steps in securing a position in cybersecurity, as demonstrated by Mengue’s journey.
Notable Quotes:
"Once I became curious about how it happened, I started kind of like poking around the Internet myself, trying to Google."
"It was anger, then curiosity, then after curiosity, it was determination."
"I kept waiting because I didn't think that I could do it, right, because I felt like every time I start researching hackers or pen testers or anything in cybersecurity, one of the things that I noticed, like, nobody looked like me."
"Your attitude and just the way you go about things is already a big step."
"My passion was always about going after the bad guy to protect the good guy, right?"
Resources:
https://www.linkedin.com/in/cecile-m-2375b9133/
https://www.instagram.com/cybercile/
https://cybercile.com/

...more
32min
March 12, 2024 Mariana Padilla: Building Relationships and Networking in Cybersecurity
About the Guest:
Mariana Padilla is a cybersecurity professional with a background in marketing and a keen focus on storytelling as a powerful tool. With an unexpected foray into the cybersecurity world, she has found her niche and currently serves as a co-founder, and CEO of a company pioneering in creating an automated demo marketplace for cybersecurity software. She brings a wealth of experience from education and nonprofit sectors, with a mission to bridge the gap between different cybersecurity communities through initiatives like virtual coffee meetings and community events.

Episode Summary:
In this fascinating episode of the Phillip Wylie Show, we delve into the importance of networking and the art of virtual connection in the dynamic field of cybersecurity. Our special guest, Mariana Padilla, shares her journey into the world of cybersecurity, highlighting the unexpected paths that lead to fulfilling careers in the industry. Her innovative approach to networking through 'virtual coffees' underscores the value of building strong professional relationships.
Mariana Padilla emphasizes the critical role of trust and relationship-building in the cybersecurity sector. She narrates her personal networking strategy, which includes initiating 100 virtual meetings in as many days, an effort that significantly expanded her professional network. This approach not only showcases her dedication to connecting with industry professionals but also her entrepreneurial spirit as she ventured into the cybersecurity space with her automated demo marketplace and community events. Her ability to leverage LinkedIn as a networking tool provides listeners with actionable insights on how to navigate and utilize social media effectively for career advancement.

Key Takeaways:
The Power of Networking: Establishing a strong network is key in cybersecurity, and virtual coffees can serve as an innovative and effective method for building connections.
Trusting in Opportunities: Being open to possibilities and stepping out of your comfort zone can lead to unforeseen and valuable relationships within the industry.
Personal Branding Importance: Showcasing personal achievements, like participating in or winning CTF (Capture The Flag) competitions, is crucial for building one's brand and portfolio.
Bridging Industry Gaps: Collaboration between different cybersecurity communities, such as practitioners and executives, is essential.
Utilizing LinkedIn: Engage actively on LinkedIn, not just by posting content but also by participating in discussions and utilizing the platform's diverse features for networking.

Notable Quotes:
"I really think that the common thread with everything that I've done is storytelling."
"One of the things that I learned very early on after joining this industry is that it is very much focused… it operates differently from a lot of industries in terms of it is trust based."
"Every good conversation opens the door to other conversations."
"You have to think about it kind of like sailing. You just have to open up your sails and be willing to be open to the opportunities that come your way."
"The market is continuing to be more and more crowded. They're looking for new ways to show their product and showcase to potential clients and customers how it works."

Resources:
Mariana Padilla's LinkedIn Profile: https://www.linkedin.com/in/heretoshakeshitup/
Hackerverse Website: https://hackerverse.co/
Hackerverse LinkedIn Page: https://www.linkedin.com/company/hackerverse/

...more
28min

FAQs about Phillip Wylie Show:

How many episodes does Phillip Wylie Show have?

The podcast currently has 174 episodes available.

More shows like Phillip Wylie Show

Defensive Security Podcast - Malware, Hacking, Cyber Security & Infosec by Jerry Bell and Andrew Kalat

Defensive Security Podcast - Malware, Hacking, Cyber Security & Infosec

369 Listeners

Risky Business by Patrick Gray

Risky Business

373 Listeners

SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast) by Johannes B. Ullrich

SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast)

637 Listeners

CyberWire Daily by N2K Networks

CyberWire Daily

1,016 Listeners

Smashing Security by Graham Cluley

Smashing Security

322 Listeners

Click Here by Recorded Future News

Click Here

414 Listeners

Darknet Diaries by Jack Rhysider

Darknet Diaries

8,001 Listeners

Cybersecurity Today by Jim Love

Cybersecurity Today

175 Listeners

CISO Series Podcast by David Spark, Mike Johnson, and Andy Ellis

CISO Series Podcast

188 Listeners

Talkin' About [Infosec] News, Powered by Black Hills Information Security by Black Hills Information Security

Talkin' About [Infosec] News, Powered by Black Hills Information Security

93 Listeners

All-In with Chamath, Jason, Sacks & Friedberg by All-In Podcast, LLC

All-In with Chamath, Jason, Sacks & Friedberg

9,793 Listeners

Risky Bulletin by risky.biz

Risky Bulletin

44 Listeners

Hacker And The Fed by Chris Tarbell & Hector Monsegur

Hacker And The Fed

169 Listeners

Critical Thinking - Bug Bounty Podcast by Justin Gardner (Rhynorater) & Joseph Thacker (Rez0)

Critical Thinking - Bug Bounty Podcast

55 Listeners

Simply Offensive by Simply Cyber Media Group

Simply Offensive

2 Listeners