The Security Podcast of Silicon Valley
Jon McLachlan
Subscribe
A shame-free space to engage in open and honest discussions about what‘s going on in Security. Interviews of about 30 minutes in length explore the dilemmas and opportunities faced by real entrepreneurs, operators, engineers, and leaders. Join us and catch a glimpse into the proven technologies and techniques that solve real security problems today. https://peacemakr.io
Available episodes
Newest first
Oldest first
6 days ago
Ganesh Krishnan, Co-Founder and CEO of Anzenna - Cyber Security Awareness Training
Ganesh Krishnan recounts his incredible 25+ year journey in security and shares why he Co-Founded Anzenna, a Cyber Security Engagement and Collaboration Platform.
Employees are key to maintaining overall security. Their actions can make a big difference. Cybersecurity teams handle monitoring and updating protocols, but employees must stay aware of trends and follow best practices. Prioritize cybersecurity by investing in security measures, providing training, and encouraging participation. When employees take responsibility for protecting data and systems, security becomes a collective effort. This is Anzenna.
playlist_add
Nov 1, 2023
Elizabeth Nammour, Co-Founder and CEO of Teleskope
Join a lively discussion with Elizabeth Nammour, the Co-Founder and CEO of Teleskope, a startup focused on data security that prioritizes protection by default with AI. Lizzy previously worked with Airbnb, where she developed a passion for safeguarding PII to meet GDPR and CCPA requirements as well as other data security regulations. She also shares personal and insightful stories that inspire entrepreneurs, reflecting on how our experiences shape our paths.
playlist_add
Oct 2, 2023
Steve Orrin, Federal CTO at Intel
Steve Orrin, the Federal CTO at Intel, provides valuable insights into various topics, including AI, Trusted Execution Environments, Cloud Computing, Team Building, Mergers and Acquisitions, and Entrepreneurship. Steve began his career as an entrepreneur, but after Intel acquired his company, he took his career to the next level and has been with Intel for over 18 years. As the Federal CTO at Intel, he leads Intel’s efforts in the DoD and Federal Government verticals. Throughout the interview, Steve shares personal anecdotes and life lessons, discussing how he transitioned from a background in biology to a successful career in technology and private industry.
playlist_add
Sep 1, 2023
Kevin Kane, Founder and CEO of American Binary
Kevin Kane is the Co-Founder and CEO of Ambit, Inc. dba American Binary, a startup specializing in protecting businesses against current and next-generation cyber threats. With expertise in post-quantum cryptography and high-performance network infrastructure, catch a glimpse into the future of quantum computing and its devastating impact on RSA and EC public key cryptography, potentially halting secure communications across the Internet and globalization as we know it. In this episode, Kevin shares vulnerable moments and thoughtful insights on religion, philosophy, self-improvement, psychology, and how security plays a crucial role in today's interconnected and globalized world. Don't miss out on this insightful and engaging conversation.
playlist_add
Aug 3, 2023
Sergey Stelmakh, Head of Security Engineering at Yugabyte
Sergey Stelmakh engages the intriguing question of how to marry innovation (risk taking) with security (risk mitigation), how to build effective teams, and how his life led him down the path into security in engineering-driven companies, such as Head of Security Engineering at Yugabyte, Platform Security Architect at MuleSoft (acquired by Salesforce), Lead Security Architect at Symphony Communications, all from his roots as in mathematics as Assistant Professor at Belarusian State University.
playlist_add
Jul 3, 2023
Dominik Schürmann, Co-Founder and CEO of heylogin
Dominik Schürmann, the Co-Founder and CEO of heylogin, shares an incredible journey from childhood, and research, toward more usable security. How are usable security values different from "formal" or "provable" security? Why does it matter? How does that change where you spend your time and energy? And how can we integrate with human nature and our organic tendencies to build more secure software? These questions, and many more, guide Dominik to start heylogin, as he shares his outside-the-box vision for a better and more secure future.
playlist_add
Jun 2, 2023
Rod Schultz, VP of Product at Dust Identity
Rod Schultz reflects on his childhood experiences and heroes, how he got into security, how that led him to Apple's DRM FairPlay team, Zoom's Head of Product Security and Privacy, and now DUST Identity's VP of Product.
playlist_add
May 18, 2023
David Carpe - How to Network, and The Myth of The Great Silent Resignation
David Carpe, Founder of Carpe Search Partners, shares deep insights on the professional value of networking (connecting with and offering service to the people around us) in the security community. We explore how to network effectively, offer a give, and how networking differs from charity, philanthropy, and everyday friends. Davides some profoundly personal views on the supposedly Great Silent Resignation, which may surprise you. We end with some gre. Youvice, you don't want to miss it.
playlist_add
Jan 16, 2023
Colin Bitterfield - Head of Security (Acting CISO) People Data Labs
Colin Bitterfield connects growth and security through standardization and proper documentation at People Data Labs. In this episode, he shares his strategies and tactics for building and maintaining a business-first security team that prioritizes people, so everyone wins.
playlist_add
Dec 1, 2022
Andrew Spangler, Head of Security and Compliance at Harness
Andrew Spangler, Head of Security and Compliance at Harness, shares some deep insight from his humble yet extensive experiences as a security professional. Join us for a light-hearted and profoundly human discussion on building trust, leading teams, interviewing strangers, overcoming security challenges, celebrating security victories, and career development in the security community.
playlist_add
Nov 16, 2022
David Gurle - Founder and Executive Chairman at Hive
David Gurle is a serial entrepreneur whose career has been a catalyst to positive change in secure collaboration and communication, from everywhere to Thomson Reuters, Skype, Microsoft, Perzo, and Symphony Communications. Today, he's the Founder and Executive Chairman of Hive, a distributed cloud computing and storage platform that disrupts the expensive, error-prone, and insecure centralized compute and storage paradigms. He shares personal stories of growing up in Beruit, Lebanon, amid a civil war, where he quickly learned the value of empathy and diversity.
playlist_add
Nov 1, 2022
Aman LaChapelle, Early Engineer at Modular AI
Aman LaChapelle shares his fresh engineering mindset on security, privacy, AI, big data, compute infrastructure, and scaling. At Modular, he's rebuilding AI infrastructure for everyone, which means that data privacy is top of mind. We end with a lively exploration of what's missing from the ecosystem, and you won't believe what it is.
playlist_add
Oct 19, 2022
David M’Raihi: CPSO at Rivian
David M'Raihi is the Chief Product Security Officer at Rivian with broad expertise in cryptography and software security. Join us (guest David M'Raihi and host Jon McLachlan) as we explore what it takes to build a security team, break RSA, or just enjoy an intentional and deliberate life.
playlist_add
Oct 1, 2022
Michael Crandell, CEO at Bitwarden Inc.
Michael Crandell, CEO at Bitwarden Inc., shares his inspirational vision and deep wisdom from his journey at Bitwarden. Bitwarden drives collaboration, increases security, and boosts productivity, with the power of open source + community, as the easiest way to secure all your passwords and sensitive information.
playlist_add
Sep 9, 2022
Sergej Dechand, Co-Founder and CEO of Code Intelligence
Sergej Dechand shares his security journey from usable security research to Co-Founding Code Intelligence, where he is CEO. Code Intelligence delivers open-source static analysis-guided fuzz testing that enables developers to simplify software security testing without modifying their code.
playlist_add
Sep 2, 2022
Benoit Chevallier-Mames, Team Lead of Machine Learning at Zama
Benoit Chevallier-Mames shares a glimpse into his amazing career as a cryptographer, engineer, and leader at Apple and now Zama, where he's built software that has made a quiet yet serious impact on data security for billions of users. We explore the hard lessons learned at Apple and the technical grit behind Zama's approach to Machine Learning specific Fully Homomorphic Encryption (FHE) open-source SDK. Benoit gracefully closes with incredible words of wisdom.
playlist_add
Aug 4, 2022
Aaron Painter, Founder and CEO of Nametag
Join me for a great conversation with Aaron Painter, the CEO of Nametag Inc, on the future of authentication and "Sign in with ID" as a more trusted alternative to passwords and device-based authentication.
playlist_add
Jul 3, 2022
Anders Eknert, Developer Advocate at Styra
Anders Eknert's journey that led him to Styra was peppered with insight and experience towards the best practices for authorization, answering the question, "What are you allowed to do?" Join us as he shows us how the wild-wild-west is slowly moving toward the history books. Email him at, anders@styra.com.
playlist_add
Jun 3, 2022
Sean Cassidy: Head of Security at Asana
Sean Cassidy, Head of Security at Asana, shares stories and lessons learned through his journey in building outstanding security teams and impactful products.
playlist_add
May 1, 2022
Will Butler, Red Team at Robinhood and Co-Founder of TruffleSecurity
Join a fantastic discussion with Will Butler on how he launched his career into red teaming by hacking airport security systems as a youngster and realizing his passion for security. We deep-dive into the different types of red teams, why penetration testing adds business value, and what goes into a successful attack. We explore the different kinds of creativity needed to find vulnerabilities, why diversity is essential, specifically on red teams, ethical/moral dilemmas penetration testers often face, and more.
playlist_add
Apr 1, 2022
Salesforce Security Engineer, Benjamin Schmoker Scott (He/Him/They)
Ben (he/him/they) is a software engineer specializing in computer security who has worked at startups, large tech companies, research labs, and intelligence agencies. In this episode, Ben shares how he got into security, his experiences along the way, the challenges he's faced, and how he sees the future of Threat Intelligence and Cyber Security.
playlist_add
Mar 1, 2022
Biff Clark, Cybersecurity Specialist and Owner of Coefficient Technologies LLC
Biff W. Clark, Managing Partner/ Cyber Security Consultant of Coefficient Technologies LLC,
Biff has degrees from Midland University [BA in Business Management] and the Utica College [MS in Cyber Security, Cyber Operations]. He has 25 years sales and sales leadership experience with 15 years in selling and consulting with companies for information technology and cyber security solutions. Biff serves as Board Chair for The Hidden Genius Project, a non-profit Technology incubator for training and mentoring black male youth in technology, leadership, and entrepreneurship. He is an Advisor for Mindblown Labs, a financial wellness innovation lab and gamification studio focused on financial education, and a Venture Partner with Telescopic Ventures, a fund focused on frontier and emerging tech. Biff is a current member of the International Association of Police Chiefs and the Information Security Systems Association. (bwclark@coefficient.us)
playlist_add
Feb 3, 2022
Paul Nguyen, Co-Founder and Co-CEO of Permiso Security
An engaging discussion with Paul Nguyen, Co-Founder and Co-CEO of Permiso Security.
playlist_add
Jan 20, 2022
Founder Dan Sherry and Co-Founder Grace Chi deep dive into Pulsedive
Founder and CEO Dan Sherry and Co-Founder COO Grace Chi join for an engaging discussion on Threat Intelligence, how Pulsedive makes hard data problems simple, and how community feedback is key to successful security.
playlist_add
Dec 28, 2021
Robert Rounsavall, Co-Founder of Trapezoid Inc.
Robert Rounsavall is the Co-Founder and President of Trapezoid Inc. a company that develops visibility and management tools around the security and operations of firmware. In this interview, we discuss his childhood experience that lead him into security, a bit of his military background, and compare startups and security to Ultramarathon running.
Robert Rounsavall has deep experience in security architecture and has spent time working in the large datacenter and cloud provider space. Robert has led incident response teams for both large enterprise and federal government organizations.
Robert also: -holds a patent for a portable large-scale, remotely-deployable network security system (http://www.google.com/patents/US8931087). -is a contributing author in the Computer and Information Security Handbook ISBN: 978-0123743541 -is a contributor to the Open Data Center Alliance Provider Assurance Usage Model -was an early adopter of the CCSK (Certificate of Cloud Security Knowledge) He als…
playlist_add
Nov 15, 2021
Michael Malone, Founder and CEO of SmallStep: Certificates, Identity, X.509 and Authentication
Michael Malone, Founder and CEO of SmallStep, joins for an in-depth and compelling discussion focused on Identity, Certificates, X.509, and Authentication.
Michael offers us the whole story of the humble beginnings of SmallStep. They were initially focused on Authorization but quickly pivoting to Authentication. Michael shares his philosophy around hiring, work ethics, and his pragmatic approach to building a business. He happily contributes one small step toward a more secure future.
playlist_add
Sep 7, 2021
Dylan Ayrey, Founder and CEO of Truffle Security: How Open-Source Makes the World More Secure
Dylan Ayrey, Founder and CEO of Truffle Secure, joins for thought-provoking on how open-source projects, and Tuffle Hog in particular, are helping everyone build a more secure, resilient, transparent future.
How do you find secrets in a GitHub repo, including your Git history? Are you skeptical that open-source projects can be used to build a real company, or, secure software? What's the difference between Community and Open-Source? Why should engineers care about Open-Source projects, but especially engineers early in their careers? How do you make the case to build an Open-Source in a big company?
playlist_add
Aug 24, 2021
Fredrick Lee, CSO of Gusto: Why authentic diversity is essential for epic security teams.
Fredrick Lee ("Flee"), the CSO of Gusto, joins for a thought-provoking, bold, and honest discussion on the importance of diversity when building engineering teams in general and security teams in particular.
Flee shares humble childhood stories growing up, attending a boarding school in the deep south where he helped teachers with the school's computers and discovered the hacker magazine 2600. He took inspiration from John Lee (aka, John Threat), the first Black Hacker Flee knew and one of the participants in the 90's "Great Hacker War." Flee learned a special appreciation for the purity of the challenging puzzles behind security problems, soaking in everything he could from a diverse community of outcasts, with computers acting as the great equalizer.
But also, what is it about diversity that produces resiliency in teams and products? Building diverse teams is the right thing to do socially, but is it also the correct thing to do technically? Absolutely, but why? Further, what roles…
playlist_add
Aug 10, 2021
Michael Brooks, vCISO and Director of Cyber Risk Services at Trava
Michael Brooks, CISO at Trava, joins for a thought-provoking discussion of cyber risk, ransomware attacks, business preparedness, and risk management.
The fundamental core issue behind all cybersecurity initiatives is data security. If we don't understand the value of our data, then what do we have? The question we might need to be asking ourselves: Can your business function without it? If not, then it's business-critical, and should be protected.
playlist_add
Jul 26, 2021
Prakash Darji, General Manager of Digital Experience Business Unit at Pure Storage: On the future of storage and security
Join me for an interview with Prakash Darji, General Manager of Digital Experience Business Unit at Pure Storage, for a lively discussion on the future of storage and security.
Everything from Pure Storage's recent Portworx acquisition to recovering quickly from ransomware, take a sneak peek into the future of storage and security as Prakash sees it.
playlist_add
Jul 1, 2021
Leigh Honeywell, Founder and CEO of Tall Poppy, The Human Side of Privacy and Security: Online Harassment and Abuse
Join me for an interview with Leigh Honeywell. As founder and CEO of Tall Poppy, she's building tools and services to help companies protect their employees from online harassment and abuse.
Together, we share many vulnerable and authentic moments as we explore online harassment, abuse, and how Tall Poppy helps humans navigate difficult situations while still building a thriving business that makes the web better for all of us.
playlist_add
Jun 17, 2021
Wesley Belleman of California Air National Guard and Palo Alto Networks: Security Operations Center from Military and Private Industry Perspectives
An interview with Wesley Belleman, Cyber Warfare Operator at the California Air National Guard and System Engineer at Palo Alto Networks, and his journey through Security Operations in the United Space Space Force.
In this episode, we dive into what a SOC is, how new technology changes our ability to respond to threats, and what the open problems are still open. We explore the cultural differences between civilian and military security operations and discuss various open-source projects such as Security Onion or MITRE Att&ck that can be used to build your own SOC.
So what will the future of SOC's look like? Wes echo's Anton Chuvakin predictions that SOC's will be entirely automated, likely within our lifetimes, but not soon.
playlist_add
Jun 3, 2021
Daniel Feldman, Cloud Security Architect at HPE, Service Authentication with SPIFFE and SPIRE
An interview with Daniel Feldman, Cloud Security Architect at HPE (formerly Scytale.io), as we discuss his journey through service authentication with the open standard SPIFFE and the implementation SPIRE.
In this episode, Daniel tells the story of how he came across this problem of authentication at Veritas Technologies, why he joined a small startup Scytale.io to continue focusing on his security journey, and touch on what it's like at Hewlett Packard Enterprise. We end on a forward-looking note on what the future of cloud security might look like, with many challenging and open cloud security problems out there.
Daniel is happy to meet others with similar interests and experiences, so in that spirit, he is open to connecting and sharing stories and ideas. He can be reached on LinkedIn or Twitter as d_feldman.
playlist_add
May 17, 2021
Andrew Gontarczyk, CISO of Pure Storage: Building a Security Team
An interview with Andrew Gontarczyk, Chief Information Security Officer at Pure Storage, on the challenges of building a security team.
When is the right time for a company to build a security team? What types of Security Teams are there (Product Security, Infrastructure Security, DevSecOps, Red Team, Blue Team, Purple Teams), and what do they do? As a security leader, how do you influence the rest of a company towards a more secure posture? What are your favorite interview questions, and why? What role does diversity play in your team building? What's your leadership style? Even with a security team in place, what still keeps you up at night?
playlist_add
May 6, 2021
Anand Ganesh, Founding Software Architect at Hammerspace: Data-as-a-Service solves traditional security problems
Join me for an interview with Anand Ganesh, Founding Software Architect at Hammerspace, to discuss how storageless data solves traditional B2B storage security problems. What is storageless data? How does Hammerspace encrypt data at rest? How do disaster recovery, backup, and snapshot data protection mechanisms work in Hammerspace? Why does data-as-a-service eliminate the need for fail-overs (passive-to-active transitions)? How do permissions work? How does intelligent data classification work in Hammerspace? How does Hammerspace help a customer recover from a ransomware attack? Do we have to trust our storage vendors such as AWS, Google, Azure, or even on-prem data centers? How do you securely delete data in a globally distributed system, like Hammerspace?
playlist_add