CyberWire Daily - Rely on your strengths in the areas of the unknown. [Career Notes]

Episode Date: August 2, 2020

Director of Security Engineering at Marqeta and Host of Hacker Valley Studio podcast Chris Cochran describes his transitions throughout the cybersecurity industry, from an intelligence job with the Marine Corps, to starting the intelligence apparatus for the House of Representatives, then on to leading Netflix's threat intelligence capability. Chris points out that when pivoting to different roles and responsibilities, you must rely on your own strengths to move forward and bring value to your work Our thanks to Chris for sharing his story with us. Learn more about your ad choices. Visit megaphone.fm/adchoices

You're listening to the Cyber Wire Network, powered by N2K. and VPNs, yet breaches continue to rise by an 18% year-over-year increase in ransomware attacks and a $75 million record payout in 2024. These traditional security tools expand your attack surface with public-facing IPs that are exploited by bad actors more easily than ever with AI tools. It's time to rethink your security. Thank you. More at zscaler.com slash security. Hello, my name is Chris Cochran. I am the director of security engineering at a financial technology company called Marketa. And I'm also the host of the Hacker Valley Studio podcast. the host of the Hacker Valley Studio podcast.

I've always been fascinated by technology. And so quite early on, I would take apart computers and look at the components and try to figure out what makes them tick. And that's just kind of carried on throughout my entire career. kind of carried on throughout my entire career. My career really started in the United States Marine Corps. I got in and I picked this job of intelligence, not even really understanding what it was. It just sounded cool, so I just decided to do it. And really quickly, I realized that this is the mission

that supports the National Security Agency, which is where I was stationed for the majority of my Marine Corps career. And this is where I learned the tradecraft of intelligence. And that's what kind of propelled me into this realm of cybersecurity. I started doing threat intelligence analysis at United States Cyber Command as a contractor. And after about five years of that, I decided to step out on my own and I went on a spree of sprouting up threat intelligence capabilities all around the country. One of the most notable things that I started was I started the intelligence apparatus for the House of Representatives, which is something I'm really proud of. And I did the contractor route for a little bit.

I was at Mandiant. I was at Booz Allen Hamilton for a little while. And then one day I received a call that Netflix wanted to talk to me about leading their threat intelligence capability. And so that ended up working out. And I took my family and we flew across the country and I helped build that program to what it is today. And now I decided to step away from threat intelligence due to doing it for over 12 years. And now I lead a much larger portion of cybersecurity. What I tell people is I protect organizations from the bad actors out there on the internet. So the people, the bad hackers that are out there,

they're trying to do bad things to people's data, to applications, to organizations. I help protect the organization from those. One of the things that is often tough when you pivot is the area of the unknown. And I try to rely on my strengths, my strengths of critical thinking. I was practically a philosophy major when I was in school, ended up graduating with humanities. And I think that kind of set the base for me to be able to pivot to different areas of technology, areas of the workforce. So coming from the government, there were still additional skills I had to acquire on

my own. So I went back to school, ended up getting some certifications and getting my minor in cybersecurity. But that really helped set the lexicon and the language that I would use in the commercial industry. And pivoting from position to position and sort of like working my way up that cybersecurity ladder, I had to really rely on my strengths. And there was quite often this feeling of imposter syndrome that would kind of loom over me every time I made one of those transitions. And I had to constantly remind myself that, you know, you're here for a reason. You have skills that are valuable to the team,

to the organization. And so rely on that. Hang your hat on that fact. And that's what's enabled me to take risks and take on larger components of the pie or taking on challenges that I didn't think I could do originally. But now I get excited about those challenges. components of the pie or taking on challenges that I didn't think I could do originally.

But now I get excited about those challenges. I really hope that people look back, especially like with the podcast, I really hope that people look back and see that I have shared so many stories of so many amazing people around the world. And hopefully those stories inspire other people to get into cybersecurity and help us with this crazy, crazy field. Because I feel like we are one of the only industries where we have adversaries. And so I feel like we're all sort of fighting that same fight, going back to that Marine Corps mentality. And in the Marine Corps, we say one team, one fight. And I really do wholeheartedly believe that everyone in cybersecurity

is fighting on the same side. And so I hope that I inspire some people to take up arms within this cybersecurity arena and help us with that and help make the internet safer for everybody. And now, a message from Black Cloak. Did you know the easiest way for cyber criminals to bypass your company's defenses is by targeting your executives and their families at home? Black Cloak's award-winning digital executive protection platform secures their personal devices, home networks, and connected lives. Because when executives are compromised at home, your company is at risk. In fact, over

one-third of new members discover they've already been breached. Protect your executives and their families 24-7, 365 with Black Cloak. Learn more at blackcloak.io.