Stories from the SOC Front Lines
summary
Three SOC leaders describe concrete fixes: a 24/7 SOC and IR organization spanning 165 countries with teams in 26 countries and 40,000 developers; an apprentice program (150 applicants → 6 hires first year; ~1,000 applicants → 11 hires next year) to turn nontraditional candidates into tier‑one analysts; using SBOM→detection to convert software bills of materials into SIEM/SOAR hunting rules; OT coverage grown to about 50/50 IT/OT at one operator; and reliance on FS‑ISAC (≈5,000 members) and vendor partnerships to blunt third‑party ransomware and triple‑extortion campaigns.
AI-written summary · about
chapters (6)
- 0:00Introduction and panel overview
- 2:35Career journeys in cybersecurity
- 15:21Hot topics in security operations
- 29:11Breaking barriers in cyber hiring
- 45:23ROI and business impact of security
- 49:17Closing remarks and Q&A
related talks
51mThe No BS SOC Story
53mSecurity Operations 2018: What Is Working? What Is Not.
32mThe SOC Of The Future… The Future Is Now
41mOne SOC, The Whole SOC, and Nothing But The SOC, So Help Me
28mFrom 2017 to 2021: Integration of an Operational Situation Awareness Team to a CSIRT...
03mFighting Every Threat with AI Agents: The Future of Security Operations
32mConfidence in Chaos: Strategies for World-Class Security Operations
54mSOCcing: Responding to a Cyber Incident