E.J. Hilbert is the founder of KCE Cyber Consulting. EJ has over 2 decades of experience in the Cyber Security field. E.J. spent 8 years as a Special Agent for the FBI where he was the lead case agent for numerous cyber-crime, white-collar, and counterterrorism investigations. E.J. has been cited as an expert in Cyber and Counterterrorism by Rolling Stone Magazine, the Washington Post, Wired Magazine, the Financial Times, the Wall Street Journal, CNN, the NY Times, CNBC, the BBC, MSNBC, The History Channel and The Science Channel.Follow on LinkedIn: https://www.linkedin.com/in/ejhilbert/Follow on Twitter: https://twitter.com/ejhilbertFollow on Medium: https://medium.com/@ejhilbertConnect Online: https://kcecyber.com/Insights in this InterviewThere are six types of hacking financial crime, espionage, disruption, activism, manipulation, and regulation. Manipulation is when you start believing something and you don’t know why you believe it. Topics Reviewed: Security at MySpaceFBI Agent - Take Down of Carder PlanetFBI Agent - Infiltration of Al QaedaPrivacy - GDPR and how Privacy is Driving Security Security - Mandatory Breach NotificationSecurity - Cloud SecurityFavorite Quotes:“You can always tell the pioneers by the arrows in their back. I now wear my arrow scars with pride.”“We are [prone] to being manipulated because we listen to only what we want to hear.”Reference:Rogue Agent - https://medium.com/@ejhilbert/rogue-agent-34421d816279DoubleCross by Kevin Poulsen - https://www.wired.com/2016/05/maksym-igor-popov-fbi/Kingpin: How One Hacker Took Over the Billion-Dollar Cybercrime Underground - https://www.amazon.com/Kingpin-Hacker-Billion-Dollar-Cybercrime-Underground-dp-0307588688/dp/0307588688/

Introduction: Stephen Semmelroth is both a West Point and Ranger School graduate, served in Afghanistan, led both a red team and a threat intelligence team while in the Army's Cyber Corps, founded and sold a Veteran-focused cyber recruiting company, and now leads both StrataCore's external recruiting division and their client security procurement discipline. Stephen is the VP of Cyber at Statacore that is an International focused organization that is headquartered in Seattle.Follow on LinkedIn: https://www.linkedin.com/in/stephencsemmelroth/Follow on Twitter: https://twitter.com/diodepackConnect over Email: [email protected] in this InterviewThat helicopter pilots are the best at threat modelingIf you are transitioning into security, leverage your “unfair advantage” and demonstrate that you are capable by competing in CFT or other competitive events. Topics Reviewed: Journey to cybersecurity from farm to electrical engineer to cybersecurityCode FellowsHow Security Practitioners can level up their gamePrivileged Access Management Systems “PAM”Effective Incident Response Planning from executives to engineers Threat Modeling and why helicopter pilots are the best at itOSINT as adversarial “Due Diligence” Favorite Quotes:“To be an endurance athlete you have to endure”“For a security product to be considered it must solve at least two problems and be designed to be effective in the hands of the most junior person on the team”Reference:Code Fellows: https://www.codefellows.org/Linux Privileged Access Management “PAM”: https://cmd.com/General Resume Guidance “ATS”: https://www.stratacore.com/rainier-cyber-resume

Robert (Bob) Vail, Citrine’s Director of Security, is a Certified Information Systems Security Professional (CISSP) with over 20 years of experience in the financial services, software, and cybersecurity industries. Started his journey as a helicopter pilot, worked with Security4Charities, and is now sought out as a thought leader in the security industry. Connect with Bob on LinkedIn - https://www.linkedin.com/in/bobvail/Insights in this Interview* Why the FAIR Methodology is so powerful and how to use it* The difference between being negligent, ignorant, and being effective in detecting attacks* How to define and use Intrusion vs Breach when defending your companyTopics Reviewed: * History from Helicopter Pilot to CTO to CISO* Involvement with Security4Charities* Leading during “enforced work from home” #WFH #COVID19* How the “shared responsibility” model impacts newer companies* Defining and exploring “Intrusion vs Breach”* Insights into effective User Training “Go out of band” * Communicating effectively with executives using the FAIR methodologyFavorite Quotes:“In security there are few right answers but lots of strong thinking”“The moat [defending the castle] was made unless the day they invented the helicopter”“The job of the computer is to reply “yes” the job of security controls is to prevent the questions from being asked.”Reference:* Security4Charities - https://www.linkedin.com/company/security4charities* FAIR - https://fair.org* FAIR - https://www.risklens.com/why-risklens/built-on-the-fair-standard/

Taz is the founder of the Cyber Collective an organization focused on protecting the voice of content creators and influencers. Email: [email protected]: @TechWithTazInstagram: @TechWithTaz

Hiring and keeping security talent in a marketplace where there is a negative unemployment rate, and over 3 million roles going unfilled every year is a top challenge for security leaders. In this episode Stuart Mitchell the Head of Security Recruitment for Stott and May explore the challenges and solutions to building a top tier security team. We review how bias, expectations, compensation, and commitment to development are hurting our teams and how to fix it.Stuart Mitchell - Head of Security Recruitment - North Americahttps://www.linkedin.com/in/stuart-mitchell-08230a40/

Security products are how most practitioners protect their organizations, but most security startups are unable to breakthrough and be heard slowin down innovation in the security market. Security startups are at the heart of security innovation and sales is how startups grow and thrive! Amy Looper owns a growth company, Relativity Consulting, that specializes in helping security product and services find thier voice and build a repeatable sales and marketing function. "Best way to sell something: don't sell anything. Earn the awareness, respect and trust of those who might buy." - Rand FishkinAmy Looper ContactEmail: [email protected]: https://www.linkedin.com/in/amylooper1/

Security for startups, if you deploy code you need an AppSec program. In a long form conversation James Chiappetta the VP of Security at CLEAR talks us through the importance of AppSec and why it is needed to maintain trust with customers, integrity in the service, and how to get started.Linkedin: https://www.linkedin.com/in/jameschip/

The attacker seems to always have the upper-hand, the only way to defend against them is to think, plan and act like them. Penetration testing and Red team exercise are how the good guys act like the bag guys so security leaders can more effectively protect their organizations. Brian and Brad dive into the adventure and divulge the details of what is like to break into a bank, get caught in a police raid, and more!Brian Tant - CTO https://www.linkedin.com/in/briantant/Brad Herring - VP of Business Developmenthttps://www.linkedin.com/in/infosecbrad/

CyberSecureIPS is the global leader in unified cyber-physical protection. They are a an organization with the singular mission of defending critical infrastructure from physical attacks. From nation-state actors to government led cyber espionage the physical layer is the most important layer when defending critical infrastructure, Scott and Steve unpack the challenges and what it takes to defend effectively at scale.Scott Rye - CEOhttps://www.linkedin.com/in/scott-rye-74bbb95/Steve Sohn - CTOhttps://www.linkedin.com/in/stevesohn/