Detection at Scale

Sisense’s Ty Sbano: What Application and Product Security (Really) Is

Today's guest shared an eye-opening definition: "Application security is an evolving narrative. It's all about collaborating and interacting with the people building the business."

When Ty Sbano started, application security wasn't really called application security. He was fortunate enough to be one of the early folks that had a formal degree in information technology with a focus on security from Penn State University.

From JP Morgan to Capital One to the startup field, Ty collects over 15 years of experience in security. Today, he is Chief Trust and Security Officer at Sisense and he sat down with us to discuss all things AppSec, how to build early, robust security teams, and how to lead with empathy in an evolving agile environment.

Topics discussed in this episode:

• Ty’s background in the financial/fintech industry and his current focus on data science and the conversions of security.
• What application and product security means and why it’s really important to enable businesses to move fast.
• The importance of choosing one vertical in information security and being an expert at it.
• How an agile methodology and manifesto help ship product features and engage engineers.
• How security practical programs differ between large enterprises and startups.
• Security tooling: Building vs Buying
• Building early security teams: good patterns that are important to get established in the beginning. 
• The relationship between an application security function and an incident response function.
• 3 pieces of actionable advice for security teams.

High Tide Advisors‘s Brad LaPorte: Operational Readiness and EDR

Attackers are always ahead of the game and today you need more than having a lock on your front door. Modern security requires organizations to think outside the box, re-architect their environment, and be able to scale more efficiently and effectively.

In this first episode, we sat down with Brad LaPorte to discuss Endpoint Detection and Response (EDR) in depth.

Brad has spent time in US Cyber Intelligence, large technology companies like IBM, research firm Gartner, and today as partner at High Tide Advisors a firm specializing in go-to-market consulting.

Topics discussed in this episode:

Topics discussed in this episode:

• How Brad has seen endpoint detection and response evolve over the last 5 years.
• How attackers are always well financed and resourced.
• Organizations’ struggles with application control.
• What caused the shift from AV to EDR products and tools.
• How detection as code is critical for many reasons.
• The biggest challenges Brad has seen when deploying EDR in a large organization.
• The importance of educating your leadership, have a proper plan, use case, and assess your operational readiness when implementing EDR. 
• Recommendations for engineers looking to build their own version of an EDR platform.
• Tools and technologies that Brad is paying attention to like zero trust architecture.
• 3 pieces of advice for security teams looking to succeed at EDR at scale.

Welcome to The Detection at Scale Podcast

Welcome to the Detection at Scale Podcast! My name is Jack Naglieri, CEO and founder of Panther Labs and more importantly, I'm also a security practitioner. 

When I was part of the Airbnb and Yahoo security teams, I experienced firsthand the challenges of high-scale security monitoring. In 2018, I left Airbnb to fully dedicate myself to solving this problem.

In this short episode, I will cover:

- Who we are
- Why we are doing this podcast
- What you can expect on future episodes

We can promise you one thing: this is NOT a podcast about selling you what Panther can do. The #1 reason we are doing this, it's because we want to help demystify a lot of techniques that we use to operate effectively at scale. 

Thank you for listening and very excited to start this journey together!