Jimmy Sanders, head of information security at Netflix DVD joins Cobalt CSO, Caroline Wong, for a great conversation on everything from leadership to growing and connecting with the security community.Di Humans of InfoSec

Gisela Hinojosa is a Senior Security Consultant at Cobalt, executing IoT penetration tests and red teaming exercises with a wide variety of security teams. With over 13 years of experience in the tech world, Gisela has held roles in admin, software engineering, QA, consulting, and penetration testing. In this episode, she shares what vulnerabilitie…

Tejpal Garhwal is the director of DevSecOps and application security at Pega. With more than 26 years of experience in application development and product security, he has led multiple security and dev teams, and set the direction for information security, application architecture, policy, and processes within numerous organizations. In this episod…

Carving an unconventional path towards information security, Yael advises many a CISO, CIO and CRO. Leadership roles at BlackRock and JPMorgan during periods of crisis and growth have given her a unique technical and business perspective — instead of saying “Here’s why that won’t work.”, she asks “But what if we tried this?” In this episode you’ll …

Whether you're stepping into your first managerial role, or you're about to inherit a fully formed team, you might be facing self-doubt and uncertainty. Security veteran Tia Hopkins — Chief Cyber Resilience Officer and Field CTO at eSentire, adjunct professor, LinkedIn instructor — shares with Caroline how to overcome impostor syndrome as you progr…

Return guest Robert Wood is the CISO for the Centers for Medicare and Medicaid Services. He leads enterprise cyber security, compliance, privacy, and counter intelligence functions at CMS and ensures the Agency complies with secure IT requirements while encouraging innovation.In this episode, Robert discusses with Caroline how big changes and organ…

Bipin Gajbhiye is a security practitioner, advisor, and investor. These three roles coalesce into a unique perspective on how cybersecurity professionals can achieve their goals — whether it's negotiating with the board, landing a critical investment, or advancing in their careers.Di Humans of InfoSec

Geoff Huston has been working on the Internet since the early 80’s and, in his own words, “did his bit” to set up the Internet in Australia, as well as to set up the early global Internet in the academic and research community. In this episode, he shares with Caroline the leaps and bounds hardware has made over the decades to bring us opportunities…

Is the manager role the only path ahead in cybersecurity? Seif Hateb, Security Architect at Twilio, shares his view on the Individual Contributor vs Manager dilemma, and how people in the field can pursue the type of role that fits them best.And if you're just starting in the cybersecurity field, make sure to check out Seif's YouTube channel, full …

As the CISO of North America at Checkmarx, Peter works towards providing the technology, expertise, and intelligence that enable developers and enterprises to secure the world’s applications. A lifelong developer at heart, Peter shares with Caroline his insights on what motivates Dev teams to prioritize security, and why so many current strategies …

What felt like science fiction 40 years ago is our reality today. What about the technology that will come in the next 40-50 years? What could change, and how can people band together to craft a bright and equitable future?Eugene Spafford — technologist and professor of Computer Sciences at Purdue University — talks with Caroline about how advances…

Richard holds many titles, one of which is the President of the OWASP LA Chapter. Initially an architect, learning AutoCAD sparked his interest for all things technical. After a career change, Richard has held many high-profile roles in cybersecurity, bolstering numerous communities and initiatives.Don't forget to check out https://planetcybersec.c…

Security Advisor at Office of the CISO and Co-Host of Google's Cloud Security Podcast, Dr. Anton Chuvakin, chats with Caroline about the past, present and future: how a hacked computer shifted his interest from physics to security, how threats from the 80s still plague orgaizations, and how cybersecurity will continue to spill out of the digital re…

Don’t have a “typical security background?” Neither did Henning Christiansen, who is now the CISO at Ottobock. Before starting in InfoSec, he tried out roles in finance, development and auditing. Until one day, he began to nurture his interest in InfoSec, which led him to roles in Bombardier Transportation, Axel Springer, and now Ottobock. With dec…

Security Relations Leader Vandana Verma is the Chair of the Board of Directors at OWASP. Starting with the dream of supporting her family, she pursues her curiosity around technology and builds renowned expertise in application security, infrastructure, and product security. In this episode, Caroline learns more about Vandana’s story, her diversity…

Zenobia Godschalk — SVP of Communications at Hedera Hashgraph, and Founder and CEO of ZAG Communications — shares how a passion for PR, tech, and privacy has shaped her career. From handling comms around cloud computing, to investor relations in InfoSec, and now spearheading awareness around distributed ledger technology, she shares helpful tips on…

With over 15 years of technical and managerial experience, Marnie Wilking has led security programs across multiple verticals — retail at Wayfair, healthcare at Orion Health, and finance at Early Warning and Wells Fargo. Listen to her story to learn how the CISO role changes in each environment, and what stays the same.…

While hearing Nicole's story, Caroline learns more about the emerging Business Information Security Officer role. Nicole breaks down the unique value BISOs can bring to their organizations, and what others can learn from the role to earn a seat at the business table. If you enjoy this talk, you can catch both speakers live at our upcoming PtaaS Exc…

Yael Nagler — founder of Yass Partners, advising CISOs, CIOs and Boards — surprised us when she said “Let me interview Caroline!” Taking this episode in a new direction, Yael asks Caroline about her story, her career, and her aspirations.Di Humans of InfoSec

Will Gant — accomplished developer, author, software architect and co-host of the podcast “The Complete Developer” — shares with Caroline a glimpse into the Dev world. They talk about motivations, challenges, and how security teams can work better with their dev counterparts. A small hint: let your nerd flag fly.…

Winner of "Best Security Podcast 2018" and "Best Security Podcast 2019," Smashing Security is a fun and informative show on tech SNAFUs. Co-host Graham Cluley shares more about his 30 years in cybersecurity, along with thoughts on malware, state-sponsored attacks, IoT, and how the cybersecurity scene today would have looked like science fiction whe…

Without good governance, every other part of security becomes much less effective. Caroline sits down with Deika Elmi — a security leader profiled by Risk & Compliance organization “Risky Women” in 2021 — to talk about GRC’s role in creating business value, and why Confidentiality shouldn't steal the spotlight away from Integrity and Availability.…

Caroline talks with tech executive Brian Carmenatty and Sanjay Deo, Founder & President at 24By7Security, Inc. They explore how teams can face prevalent threats by going back to basics with their technology and security policies.Di Humans of InfoSec

Swathi Joshi is an Information Security executive who focuses on risk management, crisis response, security services, and cloud security engineering. She is currently the VP of Cloud Security at Oracle where she leads a global team of engineers, analysts, and operators to secure Oracle SaaS applications and keep customer data safe. Prior to Oracle,…

As Chief Information Security Officer for Principal Financial Group, Meg Anderson is responsible for the information security program for the global Fortune 500 company including governance, risk & compliance; identity and access management; cyber defense operations, and more. She is passionate about enabling and accelerating business strategies wh…

Jennifer Czaplewski is the Senior Director on the Cyber Security team at Target. In this role, she is responsible for leading DevSecOps, Vulnerability Management, and Endpoint Protection. Among holding several leadership roles within the information security industry throughout her career, Jennifer is also the 2021 co-chair of the Cyber Security Su…

As the Chief Information Security Officer at Epiq, Jerich Beason is responsible for ensuring the security of the company’s digital assets as well as transforming the Epiq cybersecurity program into a world-class industry leader. Jerich has spent his career building industry-leading cybersecurity programs to protect some of the nation’s most sensiti…

Andrew Obadiaru is the Chief Information Security Officer at Cobalt. In this role, he is responsible for maintaining the confidentiality, integrity, and availability of Cobalt's systems and data. Prior to joining Cobalt, Andrew was the Head of Information Security for BBVA USA Corporate Investment banking, where he oversaw the creation and executio…

Matthew Sharp leads the information security function for Logicworks as Chief Information Security Officer (CISO). His role includes responsibility for information security governance, risk management, strategy and architecture, and compliance. Rock Lambros is the CEO and Founder of RockCyber, LLC. He is a seasoned Cybersecurity and Information Tec…

Sydney Klein is the Chief Information Security and Data Officer for Bristol Myers Squibb, a global biopharmaceutical company whose mission is to discover, develop, and deliver innovative medicines that help patients prevail over serious diseases. In this episode, she discusses how she was impacted by the brilliant scientist who created the medicati…

Chenxi Wang is a founder and general partner of Rain Capital Management, while also serving on the board of directors for MDU. Inspired by learning new things, she is a long-time thought leader, executive, and women in tech advocate. This episode dives into how Chenxi finds inspiration from continuously learning and encompassing a growth mindset. L…

Tiago Teles is an information security evangelist at a Dutch bank, ABN AMRO. He always had a tendency to look at things differently, and that’s what Tiago explains is at the heart of information security. Fueled by his passion for diversity in InfoSec, he dives into how the more we embrace diversity, the more people will join the information securi…

Dr. Ksenia Peguero is a senior research engineer within the Synopsis Software Integrity Group. She has nine years of experience in application security and five years in software development. She focuses her research on static analysis, JavaScript security, frameworks, and technologies. Before diving into research, Ksenia had a consultant career in…

Starting as a 15-year-old Isp system admin to becoming the Sr. Principal Consultant at Synopsys, Kevin Nassery's path is as extraordinary as it is insightful. Listen to the latest episode of Humans of Infosec here:Di Humans of InfoSec

Episode 57 Chuck Kesler: The Existential Threat Advisor by Humans of InfoSecDi Humans of InfoSec

Episode 56 Jack Roehrig: The Educational Journey of Turnitin's CISO by Humans of InfoSecDi Humans of InfoSec

Episode 55 Alex Jones: Wielding Collaboration with Creative Grit by Humans of InfoSecDi Humans of InfoSec

For our latest Humans of InfoSec podcast, we’re excited to welcome Phillip Wylie on the show. Phillip has over 22 years of experience with the last 8 years spent as a pentester. Phillip has a passion for mentoring and education. His passion motivated him to start teaching and founding The Pwn School Project a monthly educational meetup focusing on …

Despite the talent shortage, the barrier to entry in information security remains daunting. Yet Davin Jackson, a former flight mechanic turned senior penetration tester, learned to leverage his passion and tenacity to pursue and achieve his infosec goals. Now, Davin is invested in helping others in the field through accessible mentorship, teaching,…

For our latest episode of Humans of InfoSec: Emerging Voices, we’re excited to welcome Karan Dwivedi to the show. Karan is a security engineer at Google specializing in detection and response, but he dedicates his free time to coaching and mentoring others breaking into the field. His work demystifying the interview process for security engineers, …

For our latest Humans of InfoSec podcast, we’re excited to welcome Octavia Howell on the show. Octavia, who is currently the Business Information Security Officer at Equifax, is a seasoned leader and practitioner with extensive experience in governance, networking, and security. She is also the founder of Augustus Redefined, an organization founded…

Michelle Valdez, the CISO at OneMain Financial, doesn’t approach cybersecurity through the lure of the threat. Instead, she applies a methodical, problem-driven approach honed through her background in the US military, where she served as an investigator for the U.S. Air Force. Her extensive experience working in national security, intelligence, an…

For the 50th episode of Humans of InfoSec, we’re excited to feature Larkin Ryder, Slack’s head of product security and former interim chief security officer. Larkin has held engineering roles at high tech companies for more than 25 years, including more than five years as a senior security engineer at Twitter. While Larkin has a proven track record…

In the latest episode of Emerging Voices, we’re excited to welcome Busra Demir to the show. Although Busra’s official title is Pentest Architect at Cobalt, where she is responsible for managing day-to-day pentest operations, her passion lies in breaking things. Busra is a hacker to her core—demonstrating an inimitable aptitude for testing applicati…

Most people dread the ominous 3 am work call, but for Dr. Brandie Anderson, it’s energizing. As a security researcher with more than 18 years of experience and a PhD in Cyber Administration, Brandie has spent her career pursuing new challenges—and is not afraid of learning from her mistakes. Her passion has driven her to lead teams across incident …

In our latest episode of Emerging Voices, we’re excited to welcome Preeti Ravindra to the show. With a passion for learning and an aptitude for applying new technologies, Preeti demonstrates firsthand what innovation can look like within security. She acquired her master’s degree in information networking from Carnegie Mellon and now serves as a se…

Karen Worstell, a well-known technology leader and serial CISO, has driven security initiatives at companies like Microsoft, AT&T, and Bank of America. Yet after decades of leading information security teams, Karen made a pivotal and life-changing decision to become a chaplain with a focus on palliative care. Following her passion for helping other…

In our latest episode of Emerging Voices, we’re excited to welcome Steven Asifo to the show. Steven is a recovering auditor who now leads GRC initiatives with the Paranoids at Verizon Media. He tackles information security problems with humor and collaboration, leveraging his business background to bridge the conspicuous gap between highly technica…

When information security is complex to teach, how do we build effective curriculums for diverse learning and application? Aaron Kraus, an infosec educator with more than twelve years of teaching experience, has a few ideas. With hands-on experience in GRC and infosec leadership positions at startups and financial services firms, he brings a fresh …

Drumwave CEO Michelle Dennedy is the privacy advocate we all need. As the co-author of the Privacy Engineer’s Manifesto and the Privacy Engineer’s Companion, Michelle has pioneered robust change at companies like Cisco, where she was the Chief Privacy Officer. She passionately believes that privacy is a fundamental human right. While maintaining ex…