Detection at Scale

In this episode of Detection at Scale, Jack speaks to Thijn Bukkems , Threat Hunting Lead at Grammarly . Thijn shares his expertise on building a robust security intelligence program, emphasizing the importance of leveraging existing resources and adapting current tools to enhance threat detection.    Thijn discusses the value of working backwards from response strategies to design effective detec...

In this episode of Detection at Scale, Jack speaks with Saksham Tushar , Head of Security Operations & Threat Detection Engineering at CRED , about the challenges of compliance in a high-growth environment. Saksham shares their strategy for automating security processes and enriching data to enhance threat detection.  He emphasizes the importance of verifying automated outcomes to ensure accur...

In this special episode of Detection at Scale, Jack welcomes security experts Dan Cao , Engineering Manager of Security Incident and Response at Netflix , and returning guest Josh Liburdi , Staff Security Engineer at Brex . They discuss the rise of developer-centric security solutions and the ongoing balance between utilizing big platforms like CrowdStrike and bespoke tools — the build versus buy...

In this episode of Detection at Scale, Jack speaks to Alessio Faiella , Director of Security Engineering & Security Operations at ThoughtSpot , to discuss building forward-looking security programs for 2024.  Alessio dives into the dynamic and ephemeral nature of modern security environments and the importance of understanding the nuances of the product and user base. He also highlights how Th...

In this episode of Detection at Scale, Jack speaks to Roger Allen , Senior Director, Global Head of Detection and Response at Sprinklr , to explore the complexities of running a modern SOC. Roger shares his expertise on prioritizing alerts with contextual understanding, the importance of crafting a robust data strategy, and preventing team burnout.  From integrating adversary testing to ensuring t...

In this episode of Detection at Scale, Jack welcomes Christopher Watkins , Senior Staff Cloud Security Engineer at WP Engine , to discuss innovative logging solutions and efficient data management across multiple cloud platforms. Chris reveals how WP Engine leverages native tools and robust API gateways to streamline logging processes.    He shares strategies for cost-effective threat hunting, suc...

In this episode of Detection at Scale, Jack Naglieri chats with Darren LaCasse , Director of Threat Intelligence, Incident Response, & Threat Detection at Elastic . Darren offers insights into the innovative project around detection as code, shedding light on the methodologies Elastic employs to enhance security operations.  Darren touches on the challenges of managing massive amounts of data,...

In this episode of the Detection at Scale podcast, Jack speaks to Daniel Wiley , Head of Threat Management and Chief Security Advisor at Check Point Software , to discuss the intricacies of balancing technology and human analytics in cybersecurity.  Daniel shares his experiences in building three successful internal startups at Check Point and emphasizes the importance of continuous learning throu...

In our latest episode of Detection at Scale, Jason Waits , CISO at Inductive Automation , shares insights learned in his journey from network administration to cybersecurity and the importance of SCADA systems.  He dives into the value of automation, ML, and AI in security operations, highlighting the need for asking the right questions for efficient data analysis. Jason also discusses building a...

In our recent special Hot Ones -style episode of Detection at Scale, Panther CEO Will Lowe and Founder & CTO Jack Naglieri sit down to taste hot sauces and talk hot topics in the field of cybersecurity. Jack shares his evolution from security professionals to founders, emphasizing the importance of experience and understanding attacker profiles.  Jack also gives his insights on the foundationa...

In a recent episode of the Detection at Scale podcast recorded at the RSA conference, Jack chats with Corey Quinn , Chief Cloud Economist at The Duckbill Group , an AWS cost-management agency. They talked about the intersection of security and billing in the context of AWS environments, highlighting the significance of observability through billing data to enhance security measures.  Corey also di...

In this episode, Jack Naglieri speaks to Jeff Bollinger , Director of Incident Response and Detection Engineering at LinkedIn , who shares valuable insights on his journey in security, key technological shifts he's witnessed, and his approach to threat intelligence, incident response, and monitoring.  Jeff highlights the importance of contextual understanding in security operations and emphasized...

In this episode, Jack Naglieri speaks to Josh Liburdi , Staff Security Engineer at Brex . Josh explains the process of developing their new security data pipeline toolkit, Substation and how it has been working. He also discusses the importance of quality data, highlighting the impact of data transformation.  Josh also shares his insights on the value of human analysis in SecOps and modern inciden...

On this week's episode of the Detection at Scale podcast, Jack talks with Matthew Valites , Director of Threat Detection & Operational Strategy at SAP . They discuss which threat detection approach works the best, what metrics Matthew uses to gauge his programs, and why Matthew is a proponent of using detection as code.  Matthew also looks to the future and gives his prediction on what role te...

On this week's episode of the Detection at Scale podcast, Jack talks with Justin Anderson , Security Engineering Manager, Detection & Response at Meta . They discuss how Meta has built its detection engineering program, how it treats detection-as-code like software, and how it gauges risk by assessing the TTPs applicable to the environment. They also talk about where AI is able to help out in...

On this week's episode of the Detection at Scale podcast, Jack talks with Charles Anderson , Director, Global SOC at Sony . They discuss better approaches to risk-based alerting that leverage metadata, how they fine tune detections across a global organization, and what factors to use when determining thresholds. They also talk about how to use Time to Detect to improve your strategies, how LLMs c...

On this week's episode of the Detection at Scale podcast, Jack talks with Jason Craig , Director - Threat Detection & Response at Remitly . They discuss the common TTPs of threat actors and how organizations can better protect against them by adopting hardware-backed authentication, a risk-based approach to logging, and building their threat modeling. They also talk about why organizations sho...

On this week's episode of the Detection at Scale podcast, Jack talks with Drew Gatchell , Director, Detection Engineering at AppOmni . They discuss how to overcome the challenges to detection on SaaS platforms and how they're building strategies upon alerting and detection frameworks. They also talk about how generative AI can help with normalizing inputs, the benefits of data lakes for D&R, a...

On this week's episode of the Detection at Scale podcast, Jack talks with Emanueal Mulatu , Senior Engineering Manager - Detection & Response at Block . Together, they discuss what success means in security, the most rewarding things about security, and how to address and prevent one of the biggest challenges today: burnout. They also talk about ways to increase productivity through automation...

On this week's episode of the Detection at Scale podcast, Jack talks with Dr. Anton Chuvakin , Senior Security Staff at the Office of the CISO at Google Cloud . They dig deeper into the conversation taking place online around decoupled SIEMs, which both Jack and Anton wrote about. They discuss what a decoupled SIEM is, the evolution of data platforms and security capabilities, if decoupled SIEMs w...

On this week's episode of the Detection at Scale podcast, Jack talks with Dhruv Majumdar , Director, Cyber Risk & Advisory at Deloitte . They discuss common challenges when transitioning from a traditional SOC to a detection and response program, what questions to ask when building a threat modeling strategy, and the benefits data lakes can unlock for D&R. They also talk about how LLMs are...

On this week's episode of the Detection at Scale podcast, Jack talks with Anton Chuvakin , Security Advisor at the Office of the CISO at Google Cloud, and Timothy Peacock , Senior Product Manager at Google. Together, they discuss some of the needs and trends in cybersecurity today, including how to know what level of D&R your organization needs, the use cases for AI today, and how LLMs and SIE...

In this episode, Jack speaks with David Seidman , Head of Detection and Response at Robinhood. David has worked for large tech companies like Google, Microsoft, and Salesforce in a variety of D&R roles.  During this episode, David shares his tactical advice on how his team is building the pipes and engines of security at Robinhood, his top tools to improve fidelity of detections, and what he’s...

In this episode, Jack chats with Christopher Witter (aka Witter), Engineering Manager, Detection & Response at Spotify and a founding member and former lead for Crowdstrike’s Falcon OverWatch managed hunting service.  Witter has nearly two decades of experience in incident response and information security, holding leadership roles on computer security and incident response teams (CSIRT) with...

In this episode, Jack Naglieri speaks to Kelly Jackson Higgins , Editor-in-Chief at Dark Reading. During the episode, they share their thoughts about how cyber threats have changed over the years.  Topics discussed: Kelly offers fascinating insights into how cybersecurity journalism has evolved to keep pace with the ever-changing industry. She offers an example of why choosing to patch systems is...