We have a problem in security today. We simply don’t have enough people to cover all the needs. Colleges and technical schools are starting Cyber specific programs, but those are going to be academic practitioners and are going to need time to season in the industry. Vendors are pushing out more and more tools or information on what is or isn’t going wrong in customers networks from not only detection-based alerts, but from vulnerability, risk and compliance standpoints. We are monitoring more and more of a user’s presence on the network but we are creating more and more noise for ourselves while we have been trying to reduce and refine the noise. We need something new, or we need to recognize something that we used to have and bring it back to the front. We lost coordination at the tactical level across the security stack. The purpose of this talk is to draw from years of experience in the vendor world in look at customers organization structures and make a case for what works and what doesn’t work. It’s based on architectural principles but not specific to a compliance version or to the plumbing of a security stack. Attendees will leave with a better understanding of how they can work with and influence their security teams positively along with internally marketing for the recognition of a new role within the security organization.

Neal Humphrey is currently a Threat Intelligence Engineer, working for ThreatQuotient. He has been active and advising in the security industry for over 15 years and in technology for 20 plus. Previous to his current position he was a Technical Solution Architect for Cisco, and before that was a Principle Security Engineer for Sourcefire.

Back to Derbycon 2018 video list