In this week’s episode of The Future of Security Operations podcast, Thomas is joined by Mark Hillick, CISO at Brex. Mark’s experience in the security industry spans more than two decades. He started out as a security engineer at Allied Irish Banks before advancing through companies like MongoDB to become Director and Head of Security at Riot Games. His 2024 book, The Security Path, features over 70 interviews with security professionals on their career journeys.
Season 5
Episode 40•April 22, 2025•42 min
Brex's CISO Mark Hillick on avoiding tool bloat and learning from high-severity incidents
Listen on:
Episode 39•April 15, 2025•43 min
Ofgem’s Mollie Chard on driving resilience through diverse hiring practices
In this week’s episode of The Future of Security Operations podcast, Thomas is joined by Mollie Chard. Mollie’s career spans 10+ years in technical SOC and leadership roles at organizations like the UK’s Met Office, Capgemini, and OVO. She’s recently accepted a new role as Head of Cyber Guidance & Monitoring at Ofgem, the UK’s Office of Gas and Electricity Markets. A passionate advocate for diversity, she’s also the Chief Advisor for Women in Cybersecurity UK and Ireland.
Listen on:
Episode 38•April 8, 2025•46 min
The Trade Desk's Joe McCallister on salary negotiation and leading without micromanaging
In this week’s episode of The Future of Security Operations podcast, Thomas is joined by Joe McCallister. Joe’s journey in security is truly unique - in less than a decade, he pivoted from selling BMWs to his current role as Senior Manager of Cybersecurity Operations at The Trade Desk. He’s also led impactful initiatives in risk management, threat hunting, and incident response at Synoptek.
Listen on:
Episode 37•April 1, 2025•55 min
LastPass's Christofer Hoff on navigating incidents while rebuilding the security org from scratch
The Future of Security Operations podcast returns for its sixth season and our first guest is the legendary Christofer Hoff. Christofer has over 30 years of experience in network and information security architecture, development, engineering, operations, and management, including security leadership roles at Bank of America, Citadel, and Juniper Networks. He’s currently Chief Secure Technology Officer at LastPass, a unique role that combines the duties of CSO and CTO, while also serving on the board at FIDO Alliance.
Listen on:
Episode 36•April 30, 2024•44 min
Afni's Brent Deterding on deploying MFA for 10,000 employees and becoming "the Happy CISO"
In this week’s episode of The Future of Security Operations podcast, Thomas is joined by Brent Deterding. Brent has over 25 years of experience in security, both on the vendor side and now as a security leader. He spent a big part of his career with cloud-native security analytics platform SecureWorks, and he’s currently the CISO of Afni, a global provider of contact center solutions in the U.S., Philippines, and Mexico.
Listen on:
Episode 35•April 23, 2024•48 min
Ask Sage's Nicolas Chaillan on moving the DOD to zero trust and deploying Kubernetes in space
In this week’s episode of The Future of Security Operations podcast, I'm joined by Nicolas Chaillan. Nicolas is a security leader who has held several high-profile roles in US federal agencies including Chief Software Officer for the US Air Force and Space Force, Special Advisor for Cloud Security and DevSecOps at the Department of Defense (DOD), and Special Advisor for Cybersecurity and Chief Architect for Cyber.gov at the Department of Homeland Security. He is also the founder of no less than 13 companies, including Ask Sage, a GPT-powered platform that brings Generative AI capabilities to government teams.
Listen on:
Episode 34•April 16, 2024•44 min
The NFL's George Griesler on securing the Super Bowl and reducing risk through collaboration
In this week’s episode of The Future of Security Operations podcast, Thomas is joined by George Griesler. George has been working in cybersecurity since 1997, when he assumed the role of Senior Network administrator at the United States Golf Association (USGA), eventually advancing to Director of Information Security. He currently serves as the Senior Director of Cybersecurity at the National Football League (NFL), where he works to secure events like the Super Bowl, which in 2024 was the most-watched telecast ever.
Listen on:
Episode 33•April 9, 2024•36 min
Barracuda's Adam Khan on AI-driven XDR and plugging the cybersecurity skills gap
In this week’s episode of The Future of Security Operations podcast, Thomas is joined by Adam Khan. Adam is a cybersecurity and technology leader with over 25 years of experience working at Fortune 500 companies. He has a proven track record of building and managing global security teams, leading engineering, infrastructure, application, and product, and is currently VP of Global Security Operations at Barracuda.
Listen on:
Episode 32•April 2, 2024•57 min
Reddit’s Matt Johansen on renouncing superhero culture and what comes next after “shift left”
In this week’s episode of The Future of Security Operations podcast, Thomas is joined by Matt Johansen. Matt is a security veteran who has helped defend startups, the biggest financial companies in the world, and everything in between. Alongside his day job as Head of Software Security at Reddit, he teaches companies how to protect against cyber attacks, and coaches entrepreneurs and CISOs that need help with infrastructure, application, cloud, and security policies. He also writes Vulnerable U, a weekly newsletter that talks about embracing the power of vulnerability for growth.
Listen on:
Episode 31•March 26, 2024•45 min
Twilio’s Prima Virani on democratizing security and tackling burnout through automation
This week on The Future of Security Operations podcast, Thomas is joined by Prima Virani. Prima is a security engineer who worked across industries as varied as oil and gas and Fintech before becoming Principal Security Engineer at Twilio. With over a decade of experience spanning infrastructure security engineering, incident detection and response, and forensics, she's also shared insights at countless security conferences around the world, including SecTOR Canada and Agile India.
Listen on:
Episode 30•March 19, 2024•48 min
Fastly’s Andrew Santell on going from the Navy to Netflix and breaking free of bad processes
In this episode of The Future of Security Operations podcast, I'm joined by Andrew Santell. Andrew is an experienced security leader who worked for the U.S. Navy for over a decade before moving into the private sector. In 2021, he founded the Security Operations program at Netflix, and recently, he joined edge cloud platform Fastly, where he is the Director of Security Operations and Cyber Defense.
Listen on:
Episode 29•March 12, 2024•46 min
Elastic’s Mandy Andress on switching from a tech-first to people-first approach to security
To kick off season 5 of the Future of Security Operations podcast, Thomas is joined by Mandy Andress. Mandy is the Chief Information Security Officer at Elastic, a leading platform for search-powered solutions, and has more than 25 years of experience in information risk management and security. Before Elastic, Mandy led the information security function at MassMutual and established and built information security programs at TiVo, Evant, and Privada. She also founded an information security consulting company with clients ranging from startups to Fortune 100 companies.
Listen on:
Season 4
Episode 28•October 31, 2023•43 min
Dmitriy Sokolovskiy: How SecOps teams can measure and communicate their ROI to senior leadership
In this episode of The Future of Security Operations podcast, Thomas interviews industry veteran Dmitriy Sokolovskiy, a founding member of (ISC)2 Eastern Massachusetts Chapter, and has over 25 years of experience in the security industry.
Listen on:
Episode 27•September 12, 2023•43 min
Robinhood’s David Seidman: The tradeoff between technical mastery and strong management
In this episode of The Future of Security Operations podcast, David Seidman joins Thomas to discuss their career to date and what they have learned along the way. David is currently Head of Detection and Response at Robinhood, an online brokerage firm with a mission to democratize finance for everyone.
Listen on:
Episode 26•August 29, 2023•35 min
Incode Technologies’ Jeff Moss: Scaling security for startups and defending against the ever-growing attack surface
In this episode of The Future of Security Operations podcast, Thomas speaks to Jeff Moss, Senior Director, Information Security, at Incode Technologies. Incode is the leading provider of world-class identity solutions for the world’s largest financial institutions, governments, retailers, hospitality organizations, and gaming establishments.
Listen on:
Episode 25•August 15, 2023•38 min
Quickbase’s Rebecca Harness: Securely engaging with technology partners and third-party vendors and overcoming the inevitability of human error
In this episode of The Future of Security Operations podcast, Thomas chats with Rebecca Harness, VP and Chief Information Security Officer at Quickbase. Quickbase is a no-code database and application development platform that enables anyone to safely build, iterate, and integrate their applications.
Listen on:
Episode 24•August 1, 2023•41 min
Sublime Security’s Josh Kamdjou: The state of today’s email threat landscape and how to defend without reinventing the wheel
In the first episode of this season of The Future of Security Operations podcast, Thomas speaks to Josh Kamdjou, founder and CEO of Sublime Security, the world's first open and adaptable email security platform, preventing email attacks using Detection-as-Code and behavioral AI.
Listen on:
Season 3
Episode 23•May 9, 2023•42 min
Wiz’s Yinon Costica: Using a self-serve model to better equip organizations and improve security posture
In this season’s finale of the Future of Security Operations podcast, Thomas chats with Yinon Costica, Vice President of Product and co-founder at Wiz, the leading cloud infrastructure security platform that enables organizations to identify and remove the most pressing risks in the cloud.
Listen on:
Episode 22•April 25, 2023•42 min
BeyondTrust’s Morey Haber: The challenges for security operations teams due to identity-based risks in a remote working world
In this episode of the Future of Security Operations podcast, Thomas chats with Morey Haber, Chief Security Officer at BeyondTrust. BeyondTrust is a worldwide leader in Privileged Access Management (PAM), focused on addressing the most urgent cybersecurity challenges, including zero trust, ransomware, cloud security, and more.
Listen on:
Episode 21 •April 11, 2023•42 min
Oracle’s Arthur Barnes: The evolution of cybersecurity & solving the challenge of hiring the right team
In this episode of the Future of Security Operations podcast, Thomas interviews Arthur Barnes, Senior Director of Security Operations at Oracle – the world’s largest database management company.
Listen on:
Episode 20•March 28, 2023•36 min
Material Security’s Ryan Noon: Building & marketing a differentiated cybersecurity solution without spreading FUD
In this episode of Future of Security Operations, Thomas speaks with Ryan Noon, Founder and CEO of Material Security, a company that protects the email of high-risk VIPs and top global organizations.
Listen on:
Episode 19•March 14, 2023•42 min
Cybrize’s Diana Kelley: Why compliance is more than a checkbox exercise, and how to integrate it into your security toolkit
In this episode of the Future of Security Operations podcast, Thomas speaks with Diana Kelley, Chief Security Officer / Chief Strategy Officer at Cybrize, which connects organizations, security leaders, and job seekers to train and support the next generation of cybersecurity professionals.
Listen on:
Episode 18•February 28, 2023•41 min
Lacework’s Andreas Schneider: How to adapt as a CISO and the value of security failures
In this episode of the Future of Security Operations podcast, Thomas interviews Andreas Schneider - the Field CISO EMEA at Lacework. Leveraging its data-driven platform and cloud-native application protection solution, Lacework helps organizations make sense of immense amounts of security data with minimal effort.
Listen on:
Episode 17•February 14, 2023•37 min
GitHub’s Jacob DePriest: How to attract and retain more diverse security talent
In this episode of Future of Security Operations, Thomas speaks with Jacob DePriest, VP & Deputy Chief Security Officer at GitHub, a company with a mission "to help every developer - regardless of experience level - learn, code, and ship software effectively."
Listen on:
Season 2
Episode 16•December 13, 2022•42 min
Expel’s Jon Hencinski: How to Reduce Risk Through Better Security Strategy
In this episode of Future of Security Operations, Thomas speaks with Jon Hencinski, VP of SecOps at Expel, a company with "a mission to make security easy to understand, easy to use, and easy to continuously improve." Hencinski is passionate about getting to the root cause of security issues and using strategy to help organizations make problems go away entirely.
Listen on:
Episode 15•December 1, 2022•30 min
Madhav Gopal: Security Operations at Fortune 30 Scale
In this episode of Future of Security Operations, Thomas speaks with Madhav Gopal, CISO at a Fintech start-up and formerly VP of Cybersecurity Operations at Comcast Cable. Madhav has over 25 years of experience with a track record of using innovation to protect and support customers and partnering effectively with business teams. Over the course of his career, Madhav has also led engineering operations, internal audit and security consulting teams. Madhav serves as an advisor to Save the Children US and Citadel Banking.
Listen on:
Episode 14•November 15, 2022•32 min
Pipedrive’s Kristian Kivimägi: How to Scale Security Teams While Taking Care of Your People
In this episode of Future of Security Operations, Thomas speaks with Kristian Kivimägi, Head of Security Operations at Pipedrive, a CRM and intelligent revenue management platform for small businesses, who helped scale Pipedrive's Info Sec team from start-up to 20 people. Kivimägi is also a guest lecturer in vulnerability assessment and cybersecurity at Tallinn University of Technology.
Listen on:
Episode 13•November 1, 2022•23 min
Redis’ Andrew DiMichele: How to Build Engaged SecOps Teams That Stay Ahead of Attackers
In this episode of the Future of Security Operations, Thomas speaks with Andrew DiMichele, Director of Security Operations at Redis, whose background is in building security operations programs. DiMichele's security journey began in the US Air Force Reserves, and brought him to CISCO, banking, IBM, and Citrix.
Listen on:
Episode 12•October 14, 2022•31 min
Citrix’s Corey Hill: How to Make Mental Health a Priority For Your Security Operations Team
In our latest episode of the Future of Security Operations, Thomas speaks to Corey Hill, Director of Security Operations and Incident Response at Citrix. After working at organizations such as Mandiant and Cisco, in 2020 Corey joined the Citrix team when there were just a small handful of people on the SOC team. Today, the teams Corey leads spread across four countries and are responsible for Detection Engineering, Threat Intelligence, Threat Monitoring, SOAR Automation, and Incident Response (both CSIRT) services at Citrix.
Listen on:
Episode 11•October 4, 2022•33 min
TripAction’s Aaron Cooper: Why Understanding Broader Company Culture Is Critical to a Security Operation Team’s Success
Aaron Cooper is the Security Operations Manager at TripActions with 20+ years of experience working in a variety of enterprise infrastructures. He specializes in managing and designing secure network environments to meet the needs of financial and corporate customers, managing security operations centers, designing and implementing highly secure and available data networks while maintaining HIPAA, SOX, and PCI compliance.
Listen on:
Season 1
Episode 10•August 1, 2022•37 min
Jay Thoden Van Velzen: How to Prepare Your Security Operations For a Multi-Cloud Future
In our 10th episode of the Future of Security Operations, Thomas speaks to Jay Thoden Van Velzen, Multicloud Security Operations Advisor at SAP. Prior to Jay’s current role, Jay scaled the SecDevOps team from 5 to 25 team members across three continents and five countries and was the Initiative Lead for multiple security improvement programs for Multicloud across SAP.
Listen on:
Episode 9•July 18, 2022•32 min
Toast’s Rebecca Blair: Lessons From Building a Security Operations Team From Scratch
Today on the Future of Security Operations Podcast, Thomas speaks with Rebecca Blair, Manager of the Security Operations Center at Toast, an all-in-one point-of-sale and restaurant management platform for businesses in the food service and hospitality space.
Listen on:
Episode 8•July 4, 2022•27 min
Jason Barnes: How to Use Automation to Remove Tedious Tasks, Mitigate Risk, and Prioritize the Adoption of New Capabilities
On Today’s episode of the Future of Security Operations Podcast, Thomas speaks with Jason Barnes — the former Head of Global Security Operations at Netskope and current Senior Director at Charter Communications.
Listen on:
Episode 7•June 21, 2022•38 min
Panther Labs Jack Naglieri: How to Make Security Operations Painless
Today on the Future of Security Operations Podcast, Thomas is joined byJack Naglieri, CEO of Panther Labs, a cloud-native SIEM platform that alleviates the pain of traditional SIEM with detection-as-code, a robust security data lake, and huge scalability with zero-ops.
Listen on:
Episode 6•June 6, 2022•35 min
Niall Heffernan: How to Empower Your Security Operations Team to Focus on Higher Value Strategic Work
In our sixth episode of the Future of Security Operations Podcast, Thomas speaks with Niall Heffernan, Head of Security at Cygnvs, a former Senior Manager of Information Security at Informatica, and a Lecturer for BSc, HDIP, PGDip and MSc students studying in the Cyber Security streams at the National College of Ireland.
Listen on:
Episode 5•May 22, 2022•33 min
KnowBe4’s Dylan White: How to Use Automation to Remove Mundane Manual Security Tasks and Make Your Team 5x More Effective
In our fifth episode of the Future of Security Operations Podcast, Thomas speaks with Dylan White, an Information Security Engineer at KnowBe4 — a leading security awareness training platform.
Listen on:
Episode 4•May 10, 2022•37 min
urlscan’s Johannes Gilger: How Automation Can Free Up Resources and Streamline Security Investigations
In our fourth episode of the Future of Security Operations Podcast, Thomas speaks with Johannes Gilger — CEO and founder of urlscan, a URL and website scanner that enables users to take a look at the individual resources that are requested when a site is loaded. Prior to founding urlscan, Johannes was the managed the Threat Intelligence Automation team at CrowdStrike
Listen on:
Episode 3•April 25, 2022•30 min
LimaCharlie’s Maxime Lamothe-Brassard: Rethinking How Cybersecurity Tools Are Sold — Less Snakeoil, More Focus on Capabilities
In our third episode, we speak with Maxime Lamothe-Brassard — CEO and founder of LimaCharlie, a security infrastructure as a service tool that gives security teams full control over how they manage their security infrastructure. Maxime’s unique perspectives come from a career in security, including Canada’s NSA, Google, Arc4dia, and the early days of Crowdstrike.
Listen on:
Episode 2•April 11, 2022•39 min
Elastic’s James Spiteri: Why SecOps Teams Need to Focus on Small Incremental Wins and Not Try to Boil the Ocean
In our second episode, we speak with Elastic’s Product Marketing Director James Spiteri, an experienced security practitioner turned product marketer with a passion for making security accessible and easy for anyone and everyone.
Listen on:
Episode 1•March 28, 2022•38 min
MongoDB’s Lena Smart: How to address burnout in SOC teams
In our first episode, we are joined by Lena Smart, CISO of MongoDB, an inspiring leader who enjoys building teams and models from scratch, not losing sight of one of the most pressing topics of our time: burnout.
Listen on: