The Future of Security Operations
Tines
All episodes
Best episodes
Seasons
Top 10 The Future of Security Operations Episodes
Goodpods has curated a list of the 10 best The Future of Security Operations episodes, ranked by the number of listens and likes each episode have garnered from our listeners. If you are listening to The Future of Security Operations for the first time, there's no better place to start than with one of these standout episodes. If you are a fan of the show, vote for your favorite The Future of Security Operations episode by adding your comments to the episode page.
Huntabil.IT’s Raymond Schippers on scaling IR during Canva’s hypergrowth
The Future of Security Operations
05/13/25 • 48 min
In this week’s episode of The Future of Security Operations podcast, Thomas is joined by Raymond Schippers. With 15 years of experience leading detection and response teams, Raymond is a seasoned security leader with high-impact roles at Check Point and Canva under his belt. He recently became co-founder of Huntabil.IT, a Melbourne-based company providing organizations with tailored advisory services to align with their unique threat landscapes and business goals.
In this episode:
[02:27] Landing his first security internship at Siemens as a teenager
[03:18] Reflecting on some state-sponsored attacks he encountered while working IR at Check Point
[04:45] Working with government partners to attribute and dismantle APTs
[08:10] The challenges of remediating threats for anonymized customers
[09:30] What inspired Raymond’s move from Check Point to Canva
[10:35] Building Canva’s blue team during the company’s phase of hypergrowth
[12:40] Rethinking the interview process to prioritize diversity in hiring
[18:02] Proven strategies for reducing burnout and alert fatigue in IR
[21:09] How Raymond's team used automation to scale security operations at Canva
[23:16] The state of AI in security - and its most effective use cases
[28:53] What inspired Raymond to found Huntabil.IT
[31:09] Raymond’s approach to working with non-profit organizations
[39:15] The under-reported threats that could reshape the future of SecOps
[44:06] Anticipating the biggest challenges security teams will face over the next five years
[46:42] Connect with Raymond
Where to find Raymond Schippers:
Where to find Thomas Kinsella:
Resources mentioned:
The NFL's George Griesler on securing the Super Bowl and reducing risk through collaboration
The Future of Security Operations
04/16/24 • 44 min
In this week’s episode of The Future of Security Operations podcast, Thomas is joined by George Griesler. George has been working in cybersecurity since 1997, when he assumed the role of Senior Network administrator at the United States Golf Association (USGA), eventually advancing to Director of Information Security. He currently serves as the Senior Director of Cybersecurity at the National Football League (NFL), where he works to secure events like the Super Bowl, which in 2024 was the most-watched telecast ever.
George and Thomas discuss:
What security operations looked like in 1997
Protecting the secrets of regulation golf equipment at the USGA
The shift in security and privacy needs at live sports events
Securing scents, flavors, and other chemical formulations at IFF
Preparing for Super Bowl LXXVIII in the wake of the MGM Resorts cyber attack
The Super Bowl threat profile, from scoreboard hacking to stadium credentials
Collaborating with cybersecurity experts from CISA, the FBI, Caesars Palace, and the MGM Grand.
Aligning security operations with physical security
The reality of working on high-pressure events
The benefits of knowledge sharing with other teams working on live sports events
The importance of relationship building across internal security teams:
The potential of automation, orchestration, and AI in incident response
The Future of Security Operations is brought to you by Tines, the smart, secure workflow builder that powers some of the world’s most important workflows. https://www.tines.com/solutions/security
Where to find George Griesler:
NFL: https://www.nfl.com/
LinkedIn: https://www.linkedin.com/in/georgegriesler/
Where to find Thomas Kinsella:
Twitter/X: https://twitter.com/thomasksec
LinkedIn: https://www.linkedin.com/in/thomas-kinsella/
Tines: https://www.tines.com/
Resources mentioned:
A Cyberattack Shuts Down MGM Resorts In Las Vegas And Other Cities: https://www.forbes.com/sites/suzannerowankelleher/2023/09/12/a-cyberattack-mgm-resorts-las-vegas/?sh=c1b5096505c0
The 1,000-ton screen bringing Super Bowl LVI to the lucky fans inside the stadium: https://edition.cnn.com/2022/02/11/sport/super-bowl-lvi-samsung-infinity-screen-sofi-stadium-tech-spc-intl/index.html
In this episode:
[01:50] What infrastructure management and incident response looked like in 1997
[03:30] His projects at the United States Golf Association (USGA), including securing a golf handicap information network
[06:05] Witnessing the digital transformation of live sports events
[08:40] Securing flavors, scents and other chemical formulations at IFF
[13:20] Building a threat model for large OT environments
[15:30] Increasing security awareness and culture across the organization
[17:45] Moving to the NFL
[21:20] How George's team prepare for the Super Bowl
[24:10] Partnering with cybersecurity experts at CISA, the FBI, and local partners in Las Vegas like Caesars Palace and the MGM Grand.
[27:00] The Super Bowl's threat profile, from scoreboard hacking to stadium credentials to online identities of individual players
[29:20] Inside the NFL's Super Bowl command centre
[30:40] Ensuring the team is supported to handle high-pressure events
[32:55] Knowledge sharing with security teams on other live sports events, from The Olympics to the World Cup
[37:00] Reducing risk through collaboration across the security team
[38:35] AI as a defender tool and attacker tool
[41:50] The future of the SOC
[43:15] Connect with George
Elastic’s Mandy Andress on switching from a tech-first to people-first approach to security
The Future of Security Operations
03/12/24 • 46 min
To kick off season 5 of the Future of Security Operations podcast, Thomas is joined by Mandy Andress. Mandy is the Chief Information Security Officer at Elastic, a leading platform for search-powered solutions, and has more than 25 years of experience in information risk management and security. Before Elastic, Mandy led the information security function at MassMutual and established and built information security programs at TiVo, Evant, and Privada. She also founded an information security consulting company with clients ranging from startups to Fortune 100 companies.
In this episode, Mandy and Thomas discuss:
Her move from accounting to security
Why she was drawn to Elastic's employee-centric culture
How her role at TiVo in the early '00s shaped her view of privacy
Switching from a technology-first to people-first approach to security
Recognizing the human factor in incident response
Embracing asynchronous operations on dispersed teams
The importance of bringing your authentic self to work
Staying technical as you move into leadership
How she puts her law degree to use as a CISO
Balancing compliance and overall security posture
Collaboration and knowledge sharing within the CISO community
Elastic's approach of knowledge sharing by default
How prioritizing analyst time will be critical in the future of SecOps
Adopting an infrastructure-as-code approach
Balancing between proactive security measures and reactive responses
Building a culture of security across the organization
Tips for surviving in security operations in tech
The Future of Security Operations is brought to you by Tines, the platform that powers some of the world’s most important security workflows. https://www.tines.com/solutions/security
Where to find Mandy Andress:
LinkedIn: https://www.linkedin.com/in/mandyandress/
Elastic: https://www.elastic.co/
Where to find Thomas Kinsella:
LinkedIn: https://twitter.com/thomasksec
Twitter/X: https://www.linkedin.com/in/thomas-kinsella/
Resources mentioned:
Surviving Security: How to Integrate People, Process & Technology by Mandy Andress: https://www.amazon.co.uk/Surviving-Security-Integrate-Process-Technology/dp/0672321297
Mandy’s 2001 BlackHat talk on wireless LAN security: https://www.youtube.com/watch?v=XtT2Ta87uow
Elastic’s blog: https://www.elastic.co/blog
In this episode:
[01:57] Moving from accounting to security
[02:43] Finding a company with strong vision, culture and business foundations
[05:26] Working in network security in the early days of TiVo
[07:05] What’s changed in security since 2001?
[09:20] A career-long fascination with the human factor in incident response
[10:30] Embracing empathy in her leadership style
[12:25] Finding a workplace where you can be your authentic self
[16:10] Exercising her technical muscles
[17:45] The decision to study law
[21:18] Balancing compliance and overall security posture
[23:35] Knowledge sharing in the CISO community
[24:22] Elastic's policy of being "radically transparent"
[29:20] The future of security operations
[31:29] How her security team works with product engineering
[34:03] Adopting an infrastructure-as-code approach
[35:01] Building a culture of security across the organization
[38:09] Her advice for others working in security in a high-growth organization
[41:50] Baking off security products in her home lab
[44:37] Connect with Mandy
Brex's CISO Mark Hillick on avoiding tool bloat and learning from high-severity incidents
The Future of Security Operations
04/22/25 • 42 min
In this week’s episode of The Future of Security Operations podcast, Thomas is joined by Mark Hillick, CISO at Brex. Mark’s experience in the security industry spans more than two decades. He started out as a security engineer at Allied Irish Banks before advancing through companies like MongoDB to become Director and Head of Security at Riot Games. His book, The Security Path, features over 70 interviews with security professionals on their career journeys.
In this episode:
[02:06] His early career journey - from a mathematics background to building early online banking systems
[03:32] What’s kept Mark excited about security for over two decades
[04:40] The compound benefits of growing within a company over time
[07:20] Mark’s leadership style - defined by transparency, directness, and genuine care for his teammates
[12:45] Communicating the business trade-off between risk and return
[16:45] Reflecting on the team’s response to major incidents at Riot Games
[21:00] The unique challenges of securing gaming platforms
[26:30] How Mark approaches strategy and planning in the fintech space
[28:08] The case for building strong, partnership-driven vendor relationships
[31:13] Creating space for creativity - without spreading the team too thin
[34:35] Empowering his team to speak openly - even if it means calling him out
[36:35] The inspiration behind Mark’s books Digital Safety for Parents and The Security Path
[40:20] Connect with Mark
Where to find Mark:
Where to find Thomas Kinsella:
Resources mentioned:
- The Security Path - click here to redeem a free copy for podcast listeners (first come, first serve)
- Digital Safety for Parents - click here to redeem a free copy for podcast listeners (first come, first serve)
- Mark's talk during his time at Riot Games in 2016
Fastly’s Andrew Santell on going from the Navy to Netflix and breaking free of bad processes
The Future of Security Operations
03/19/24 • 48 min
On this episode of The Future of Security Operations podcast, Thomas is joined by Andrew Santell. Andrew is an experienced security leader who worked for the U.S. Navy for over a decade before moving into the private sector. In 2021, he founded the Security Operations program at Netflix, and recently, he joined edge cloud platform Fastly, where he is the Director of Security Operations and Cyber Defense.
In this episode, Andrew and Thomas discuss:
Navigating the unique challenges of the Navy, from log management to prioritization
Making the leap from the Navy to tech
Building a security operations team and program from scratch at Netflix
Red teaming phishing response playbooks at Netflix to test their effectiveness
Recognizing the value of good processes
Why teams should design processes first, automate later
Creating a feedback loop between teams at Fastly
How “shifting left” has helped Andrew’s team reduce vulnerabilities
Using automation for risk assessment at Fastly
Andrew’s approach to incidents like the Log4J vulnerabilities
Why growth in the vendor market is a good thing for practitioners
Why automation should be a requirement, not just a best practice
What advancements in AI mean for threat detection
The importance of risk-based decision-making
The potential of self-remediation
Why good security leadership starts with taking care of your people
The Future of Security Operations is brought to you by Tines, the smart, secure workflow builder that powers some of the world’s most important workflows. https://tines.com/solutions/security
Where to find Andrew Santell:
LinkedIn: https://www.linkedin.com/in/ajsantell/
Fastly: https://www.fastly.com/
Where to find Thomas Kinsella:
Twitter/X: https://twitter.com/thomasksec
LinkedIn: https://www.linkedin.com/in/thomas-kinsella/
Resources mentioned:
Google’s SRE handbook: https://sre.google/sre-book/table-of-contents/
Netflix’s 2018 blog post on SOCless: https://www.linkedin.com/pulse/socless-detection-team-netflix-alex-maestretti/
In this episode:
[02:05] Andrew’s career journey so far
[05:35] The unique requirements of working in the Navy
[09:12] Risk-driven decision making
[11:11] Self-assessing phishing response controls and mitigations at Netflix
[14:28] Andrew’s decision to leave the Navy and his transition to the private sector
[16:12] Comparing approaches to security at the Navy and in tech
[19:26] Breaking free of bad processes
[23:20] Broadening roles to include pen testing, application security, and vulnerability management
[27:27] How Andrew approaches automation at Fastly
[31:56] Protecting Fastly’s infrastructure
[33:57] How SecOps has changed and where it’s going next
[40:18] Embracing automation for vulnerability management
[42:45] Taking care of your people as a security leader
[44:56] Making engineering and automation part of prioritization
[47:19] Connect with Andrew
Material Security’s Ryan Noon: Building & marketing a differentiated cybersecurity solution without spreading FUD
The Future of Security Operations
03/28/23 • 35 min
In this episode of Future of Security Operations, Thomas speaks with Ryan Noon, Founder and CEO of Material Security, a company that protects the email of high-risk VIPs and top global organizations.
A serial entrepreneur and an expert on cloud security, Ryan previously ran infrastructure teams at Dropbox after it acquired his last company, Parastructure. Before that, he helped build a company spun out of Stanford by the Department of Defense. A graduate of Stanford, Ryan holds degrees in Computer Science and Computer Security.
Topics include:
- Ryan’s first startup experience and the decision to launch his first company, Parastructure
- Getting acquired by Dropbox and what he enjoyed most about working there
- Ryan’s journey from a hobbyist to a thought leader and founder in cybersecurity, taking a critical eye towards every system, and why Ryan sees himself as “a builder, a creator, and an optimist than a true security engineer”
- How the Russian government’s interference in the 2016 U.S. presidential election impacted his perspective on cybersecurity and helped him realize the power of APIs
- Why email is such an excellent target for cyber attackers and how Material Security secures data within inboxes
- What founders should focus on in the first year, the importance of product management, and how Material secured its early adopters, including customers like Stripe, Databricks, and Lift, so quickly
- How to help your product to stand out, and why he believes it’s important to avoid FUD tactics in cybersecurity
- What Ryan has learned from working with the world’s leading security teams and how the best teams bridge gaps to win
- Ryan’s thoughts on the uncertain global economic climate, its impacts, and how Material’s conservative approach has allowed them to maintain a relatively lean team
- The future of security operations and what trends Ryan believes will continue - doing more with less and leveraging better infrastructure and tools that enable you to go deeper with your existing tech stack
Resources:
Twilio's Prima Virani on democratizing security and tackling burnout through automation
The Future of Security Operations
03/26/24 • 45 min
This week on The Future of Security Operations podcast, Thomas is joined by Prima Virani. Prima is a security engineer who worked across industries as varied as oil and gas and Fintech before becoming Principal Security Engineer at Twilio. With over a decade of experience spanning infrastructure security engineering, incident detection and response, and forensics, she's also shared insights at countless security conferences around the world, including SecTOR Canada and Agile India.
In this episode, Prima and Thomas discuss:
The unique challenges of working in forensics
Her transition to detection and response and cloud security
Building a security detection framework at Segment
Reducing mean time to resolve through automation
Using data to prioritize which processes should be automated
Merging teams and technologies when Segment was acquired by Twilio
Joining the securing platform engineering team at Twilio
Designing a challenging and varied career in security
The influence of mentorship on career growth
Democratizing security through knowledge sharing
How security will change in the next five years
The Future of Security Operations is brought to you by Tines, the smart, secure workflow builder that powers some of the world’s most important workflows. https://www.tines.com/solutions/security
Where to find Prima Virani:
Twitter: https://twitter.com/secnerdette?lang=en
LinkedIn: https://www.linkedin.com/in/primavirani/
Twilio: https://www.twilio.com/en-us
Where to find Thomas Kinsella:
Twitter/X: https://twitter.com/thomasksec
LinkedIn: https://www.linkedin.com/in/thomas-kinsella/
Resources mentioned:
Hosting Fleet on AWS EKS by Prima Virani: https://segment.com/blog/hosting-fleetdm-on-aws-eks/
Fleet Device Management: https://fleetdm.com/
In this episode:
[02:22] Prima's introduction to cybersecurity career opportunities as a teenager
[06:30] The shift from forensics to detection and response
[09:15] Gaining experience in vulnerability and patch management, and network security
[14:15] Building a security detection framework at Segment using SOCless
[18:10] Using automation to reduce alert noise and improve response times
[20:30] The impact of automation on security team burnout
[22:50] Merging security teams, practices and technologies during Twilio's acquisition of Segment
[25:30] Moving to the securing platform engineering team at Twilio
[27:40] Growing her knowledge of AWS, Kubernetes and GCP
[32:40] Prima's plans to embrace machine learning in detection engineering
[34:20] The importance of mentorship and knowledge sharing in career growth
[37:30] Prima's all-time favorite projects, including hosting FleetDM on AWS EKS
[39:36] The future of security operations through Prima's eyes
[42:01] Prima's advice for security practitioners
[43:58] Connect with Prima
Quickbase’s Rebecca Harness: Securely engaging with technology partners and third-party vendors and overcoming the inevitability of human error
The Future of Security Operations
08/15/23 • 38 min
In this episode of The Future of Security Operations podcast, Thomas chats with Rebecca Harness, VP and Chief Information Security Officer at Quickbase. Quickbase is a no-code database and application development platform that enables anyone to safely build, iterate, and integrate their applications.
Rebecca has 25 years of experience in information technology and over 12 years of experience in security specifically. Over her career, Rebecca has launched two of her own companies; she’s led numerous high-performing cybersecurity teams through the challenges of supporting cloud-first digital transformation strategies; and she’s a board member of ISACA St. Louis. She also has a Master of Science in Information Security Engineering.
Topics include:
- Rebecca’s career journey from her start in IT to founding her first company, to becoming VP and CISO at Quickbase.
- The steps Rebecca takes to build a strong security culture within her teams.
- Balancing empathy and velocity as a CISO.
- The measures Rebecca feels best place SecOps teams to securely and safely engage with technology partners and third-party vendors.
- The inevitability of human error and how automation can help combat this.
- How Rebecca has seen SecOps evolve and the resource and skills gap being experienced across the industry and how this can be combated.
- How generative AI can be a key collaborator for SecOps teams.
- Where Rebecca sees the SecOps landscape going over the next five years.
- Rebecca’s experience in the MSP space and how she feels MSPs will be affected by attacks becoming less commodified and more targeted.
- The measures Rebecca takes to ensure her teams don’t burn out and remain passionate about their role.
Resources: LinkedIn
Reddit’s Matt Johansen on renouncing superhero culture and what comes next after “shift left”
The Future of Security Operations
04/02/24 • 56 min
In this week’s episode of The Future of Security Operations podcast, Thomas is joined by Matt Johansen. Matt is a security veteran who has helped defend startups, the biggest financial companies in the world, and everything in between. Alongside his day job as Head of Software Security at Reddit, he teaches companies how to protect against cyber attacks, and coaches entrepreneurs and CISOs that need help with infrastructure, application, cloud, and security policies. He also writes Vulnerable U, a weekly newsletter that talks about embracing the power of vulnerability for growth.
Thomas and Matt discuss:
Moving from a large security team at Bank of America to a small one at Reddit
Embracing scrappiness and doing more with less
Overcoming sunk-cost fallacy
Why the 2014 Sony hack was a pivotal time for AppSec
Running the threat research centre at White Hat
What he looks for when hiring in AppSec, the SOC and beyond
His decision to start creating content about mental health in security
Moving past imposter syndrome
Renouncing superhero culture
Paved paths and guardrails, and what comes next after "shift left"
Lessons learned from Reddit's 2023 security incident
The power of automating incident response
The Future of Security Operations is brought to you by Tines, the smart, secure workflow builder that powers some of the world’s most important workflows. https://www.tines.com/solutions/security
Where to find Matt Johansen:
Vulnerable U newsletter: https://vulnu.mattjay.com/
Twitter: https://twitter.com/mattjay
LinkedIn: https://www.linkedin.com/in/matthewjohansen/
TikTok: https://www.tiktok.com/@vulnerable_matt
Reddit: https://www.redditinc.com/
mattjay.com: https://www.mattjay.com
Where to find Thomas Kinsella:
Twitter/X: https://twitter.com/thomasksec
LinkedIn: https://www.linkedin.com/in/thomas-kinsella/
Tines: https://www.tines.com/
Resources mentioned:
The Tech Professional's Guide to Mindfulness by Matt Johansen: https://www.mattjay.com/blog/the-tech-professionals-guide-to-mindfulness
Matt's piece on developer experience in the Vulnerable U newsletter: https://vulnu.mattjay.com/p/vulnu-003-courage-quit
Reddit's post on a February 2023 incident: https://www.reddit.com/r/reddit/comments/10y427y/we_had_a_security_incident_heres_what_we_know/
Collaborative Incident Response Best Practices: Don't Rely on Superheroes by Matt Johansen: https://www.mattjay.com/blog/superhero-incident-response
Threat modeling depression by Matt Johansen: https://www.mattjay.com/blog/threat-model-depression
In this episode:
[02:14] Going from long-time Reddit user to employee
[04:50] Running AppSec at Reddit
[07:30] Being the internet's punching bag and boxing gloves
[10:30] Building a team from scratch at White Hat and lessons learned from the 2014 Sony hack
[15:10] Matt's approach to hiring
[21:15] His decision to create content about mental health in security
[23:20] Turning his Twitter network into his IRL network
[27:55] Moving past imposter syndrome
[30:00] Tools for safeguarding your mental health in incident response
[36:20] Preserving work-life balance for his teams at Reddit
[39:15] Moving past "shift left", and paved path to production and guardrails
[47:40] Lessons learned from a February 2023 incident at Reddit
[51:20] Renouncing superhero culture
[52:20] Automating incident response
[54:12] Connect with Matt
The Trade Desk's Joe McCallister on salary negotiation and leading without micromanaging
The Future of Security Operations
04/08/25 • 46 min
In this week’s episode of The Future of Security Operations podcast, Thomas is joined by Joe McCallister. Joe’s journey in security is truly unique - in less than a decade, he pivoted from selling BMWs to his current role as Senior Manager of Cybersecurity Operations at The Trade Desk. He’s also led impactful initiatives in risk management, threat hunting, and incident response at Synoptek.
In this episode:
[02:18] Transitioning from selling BMWs to leading a security team
[06:14] Moving from practitioner to manager and leaning into the role of the "communications guy"
[09:52] Balancing security team priorities with company goals
[11:40] The threats that keep Joe up at night
[14:06] How The Trade Desk's rapid growth has affected day-to-day operations
[16:10] Ensuring security stays top of mind for other business units
[19:32] Practical tips for strengthening collaboration with IT and other teams
[22:13] Joe’s approach to hiring and building a resilient team
[26:30] Enabling his incident response team to thrive, even when he's not there
[30:58] Joe’s top three leadership principles
[33:22] Tips for salary negotiation, both as a practitioner and a manager
[39:58] Navigating imposter syndrome and anxiety
[42:37] How AI is fueling Joe’s optimism for the future of SecOps
[44:29] Connect with Joe
The Future of Security Operations is brought to you by Tines, the orchestration, automation, and AI platform that powers some of the world’s most important workflows.
Where to find Joe:
Where to find Thomas Kinsella:
Resources mentioned:
Show more best episodes
Show more best episodes
FAQ
How many episodes does The Future of Security Operations have?
The Future of Security Operations currently has 45 episodes available.
What topics does The Future of Security Operations cover?
The podcast is about Podcasts, Technology and Business.
What is the most popular episode on The Future of Security Operations?
The episode title 'Niall Heffernan: How to Empower Your Security Operations Team to Focus on Higher Value Strategic Work' is the most popular.
What is the average episode length on The Future of Security Operations?
The average episode length on The Future of Security Operations is 39 minutes.
How often are episodes of The Future of Security Operations released?
Episodes of The Future of Security Operations are typically released every 14 days.
When was the first episode of The Future of Security Operations?
The first episode of The Future of Security Operations was released on Mar 28, 2022.
Show more FAQ
Show more FAQ