Why Learning Offensive Security Makes You A Better Defender - Catherine Ullman - ESW #268 | Enterprise Security Weekly (Video) Podcast

Why Learning Offensive Security Makes You A Better Defender - Catherine Ullman - ESW #268: Defensive and Offensive skills have never been mutually exclusive, but the value in training across disciplines has often been overlooked. Catherine joins us today to explain why familiarity with offensive skills, tools, and the attacker's mindset is... by Security Weekly Podcast Network (Video)

34 min listen

Boil the Ocean - SCW #71: Richard Struse, Director of The Center for Threat-Informed Defense from MITRE Engenuity joins the SCW crew for a two part interview! -What is threat-informed defense and how does it relate to other aspects of cybersecurity? -The importance of... by Security Weekly Podcast Network (Audio)

88 min listen

ATT&CK & CTID, Part 1 - Richard Struse - SCW #71: Richard Struse, Director of The Center for Threat-Informed Defense from MITRE Engenuity joins the SCW crew for a two part interview! -What is threat-informed defense and how does it relate to other aspects of cybersecurity? -The importance of... by Security Weekly Podcast Network (Video)

35 min listen

ATT&CK and CTID, Part 2 - Richard Struse - SCW #71: Richard Struse, Director of The Center for Threat-Informed Defense from MITRE Engenuity joins the SCW crew for a two part interview! -What is threat-informed defense and how does it relate to other aspects of cybersecurity -The importance of... by Security Weekly Podcast Network (Video)

52 min listen

Attack Intelligence, Collective Defense, & Trends to Watch - Michael Ehrlich - ESW #274: Attack intelligence delivers customers actionable, relevant, and timely information. Learn why Collective Defense is an integral aspect of attack intelligence and hear about the cyber trends you need to watch. Segment Resources: Visit ... by Enterprise Security Weekly (Video)

33 min listen

Attack Intelligence, Collective Defense, & Trends to Watch - Michael Ehrlich - ESW #274: Attack intelligence delivers customers actionable, relevant, and timely information. Learn why Collective Defense is an integral aspect of attack intelligence and hear about the cyber trends you need to watch. Segment Resources: Visit ... by Security Weekly Podcast Network (Video)

33 min listen

DevSecOps Essentials - Keith Hoodlet - ASW #224: How do you mature a team responsible for securing software? What are effective ways to prioritize investments? We'll discuss a set of posts on building talent, building capabilities, and what mature teams look like. Segment resources: - Visit ... by Application Security Weekly (Video)

41 min listen

DevSecOps Essentials - Keith Hoodlet - ASW #224: How do you mature a team responsible for securing software? What are effective ways to prioritize investments? We'll discuss a set of posts on building talent, building capabilities, and what mature teams look like. Segment resources: - Visit ... by Security Weekly Podcast Network (Video)

41 min listen

Clayton Fields, Javelin Networks - Enterprise Security Weekly #76: As a security specialist, Clayton has helped clients improve security programs across the world. A thorough understanding of business drivers coupled with the ability to diagnose risk has allowed Clayton to help companies avoid being a headline. Full... by Enterprise Security Weekly (Video)

38 min listen

Clayton Fields, Javelin Networks - Enterprise Security Weekly #76: As a security specialist, Clayton has helped clients improve security programs across the world. A thorough understanding of business drivers coupled with the ability to diagnose risk has allowed Clayton to help companies avoid being a headline. Full... by Security Weekly Podcast Network (Video)

38 min listen

The Right Skills For The Job - Kayla Williams - PSW #800: Just what are the right skills to have or acquire to work in cybersecurity today? Kayla and the Security Weekly crew talk about it in this segment. We also touch on why we get burnt out and how to avoid it, all in anticipation for SOC Analyst... by Security Weekly Podcast Network (Video)

50 min listen

Security Is a Feature - Keith Hoodlet - ASW #129: What does it take to manage security teams and security initiatives? Find out the importance of people in security, whether it's keeping a team engaged or encouraging a team to rethink how they approach security. Visit for all the latest... by Application Security Weekly (Video)

42 min listen

Security Is a Feature - Keith Hoodlet - ASW #129: What does it take to manage security teams and security initiatives? Find out the importance of people in security, whether it's keeping a team engaged or encouraging a team to rethink how they approach security. Visit for all the latest... by Security Weekly Podcast Network (Video)

42 min listen

This Security Crisis Is the Perfect Time to Tell You I Was Right: All links and images for this episode can be found on . This week’s episode is hosted by me, (), producer of CISO Series and (), operating partner, . Joining me is our guest this week, , CISO, . In this episode: Why do a lot of security... by CISO Series Podcast

43 min listen

CSP #102 - CISO Soft Skills Will Make or Break You! - Robert Wood: Cybersecurity is so heavily focused on technical topics, but it's the soft skills that can make or break a person. Whether you're negotiating a budget, trying to persuade another team to prioritize security patches, or collaborating with another team... by CISO Stories Podcast (Audio)

29 min listen

Blue Team Tactics and Techniques - PSW #631: It's often said that attackers need only to get it right once, where defenders have to be right all of the time. Those of us who have worked in a security role as a defender know we don't always get it right, in fact, there are often many exposures in... by Security Weekly Podcast Network (Video)

62 min listen

Things Every Developer Should Know About Security - Chris Romeo - ASW #124: Developers are at the center of properly securing applications. A large number of security issues bury developers. We must understand the things every developer must know about security in order to help them. We must practice developer empathy,... by Security Weekly Podcast Network (Video)

36 min listen

Things Every Developer Should Know About Security - Chris Romeo - ASW #124: Developers are at the center of properly securing applications. A large number of security issues bury developers. We must understand the things every developer must know about security in order to help them. We must practice developer empathy,... by Application Security Weekly (Video)

36 min listen

Building your security team & tool stack w/ Laura Bell Main #146: This episode features all things security with our guest, Laura Bell Main, CEO & Founder @ SafeStack. She shares valuable strategies for building your security team & tool stack. We cover why security is a human problem based on human motivations, prioritization conversations for assessing risks, considerations for early-stage security teams, how behavior change & decision making impact security, and considerations for companies in the “messy middle” phase. Laura also addresses communicating about security in terms of tech debt, recommendations for incorporating security monitoring tools, how to measure those tools’ ROI, and more. by The Engineering Leadership Podcast

48 min listen

Being a CISO in Higher Education - Lorna Koppel - CSP #129: At the surface, being a CISO in Higher Education is very similar to any industry vertical but the opportunities, challenges, and impacts are significantly more complex. Many consider HE to be behind in security practices. While it is true that HE... by CISO Stories Podcast (Audio)

24 min listen

Resiliency: All links and images for this episode can be found on CISO Series () How fortified is the business to withstand cyberattacks? Can it absorb the impact of the inevitable hits? Would understanding the business' level of resilience provide the... by Defense in Depth

26 min listen

How to Always Make a Business Case for Security: All links and images for this episode can be found on . How can security leaders and how do they go about matching business case to every security action you want to take? Is this the right way to sell security to the board? Check out this for the... by Defense in Depth

31 min listen

This Is How You Get Skynet - PSW #677: This week, it's the 15 Year Anniversary Edition of Security Weekly! We celebrate with three roundtable discussions on Penetration Testing, Blue Team Techniques, and Hacker Culture! Penetration Testing: Join us for a lively discussion surrounding the... by Security Weekly Podcast Network (Audio)

222 min listen

Metrics, Training, Culture & Cloud Security Resilience - Drew Rose, Ganesh Pai - ESW #229: Metrics, Training, Culture – Why Your Phishing Program Isn’t Working - Drew Rose, Living Security Phishing reports have become the standard for measuring security awareness, and yet breaches keep happening. Something is broken. Knowing how to... by Security Weekly Podcast Network (Video)

41 min listen

Metrics, Training, Culture & Cloud Security Resilience - Drew Rose, Ganesh Pai - ESW #229: Metrics, Training, Culture – Why Your Phishing Program Isn’t Working - Drew Rose, Living Security Phishing reports have become the standard for measuring security awareness, and yet breaches keep happening. Something is broken. Knowing how to... by Enterprise Security Weekly (Video)

41 min listen

Cybersecurity Hiring: All links and images for this episode can be found on CISO Series () Everyone needs more security talent, but what kind of talent, how specialized, and what kind of pressure is hiring requirements putting on security professionals? for the basis of... by Defense in Depth

26 min listen

The State of CyberSecurity Ops in a Ransomware Filled Hybrid Work World - David Finger - ESW #237: Ransomware is flourishing and our endpoints are scattered outside the corporate network. Visibility is a challenge in this age of decentralized corporate assets. Our discussion today will explore the problem from two sides. On the endpoint, where much... by Security Weekly Podcast Network (Video)

39 min listen

The State of CyberSecurity Ops in a Ransomware Filled Hybrid Work World - David Finger - ESW #237 by Enterprise Security Weekly (Video)

39 min listen

Should Risk Lead GRC?: All links and images for this episode can be found on CISO Series () Defining risk for the business. Is that where a governance, risk, and compliance effort should begin? How does risk inform the other two, or does calculating risk take too long that... by Defense in Depth

25 min listen

Don’t Make Me Explain This, Because I Can’t: All links and images for this episode can be found on If you know a difficult concept very well and you're incapable of explaining it simply to others who don't understand it, it's known as the "curse of knowledge." It is for this reason far too many... by CISO Series Podcast

34 min listen

Discover this podcast and so much more

Why Learning Offensive Security Makes You A Better Defender - Catherine Ullman - ESW #268

Why Learning Offensive Security Makes You A Better Defender - Catherine Ullman - ESW #268

Description

Titles in the series (100)

More Episodes from Enterprise Security Weekly (Video)

Related podcast episodes