# Scale To Zero

> Scale To Zero helps security team members get answers to every security question. Practitioners and leaders on cloud, AppSec, identity, AI security and building security teams.

Scale To Zero is produced by Cloudanix (https://www.cloudanix.com). Every episode page carries a summary, key takeaways, the questions the episode answers and a full speaker-attributed transcript. Each episode is also available as plain markdown at /episodes/<slug>.md.

## Episodes

- [Enterprise Security Restructuring & The AI Vulnerability Boom with Alma Paul](https://www.scaletozero.com/episodes/enterprise-security-restructuring-the-ai-vulnerability-boom-with-alma-paul/): Alma Paul, Faire. Alma Paul of Faire on why restructuring enterprise security starts with visibility, and why AI-era vulnerabilities must be prioritised by business context. Transcript: https://www.scaletozero.com/episodes/enterprise-security-restructuring-the-ai-vulnerability-boom-with-alma-paul.md
- [The Mythos Era: TPRM Evolution, AI Ethics, and Project Glasswing with Matthew Moog](https://www.scaletozero.com/episodes/the-mythos-era-tprm-evolution-ai-ethics-and-project-glasswing-with-matthew-moog/): Matthew Moog, EY. Matthew Moog of EY on why third-party risk is shifting from periodic assessments to continuous, SOC-style monitoring, and what Mythos means for security. Transcript: https://www.scaletozero.com/episodes/the-mythos-era-tprm-evolution-ai-ethics-and-project-glasswing-with-matthew-moog.md
- [AI: Your Next Tool or New Colleague? Next-Gen Security Skills with Priyanka Chatterjee](https://www.scaletozero.com/episodes/ai-your-next-tool-or-new-colleague-next-gen-security-skills-with-priyanka-chatterjee/): Priyanka Chatterjee, London School of Cybersecurity. Priyanka Chatterjee (London School of Cybersecurity) says treat AI as a colleague: trust it for SOC analysis, keep humans on response, and build skills. Transcript: https://www.scaletozero.com/episodes/ai-your-next-tool-or-new-colleague-next-gen-security-skills-with-priyanka-chatterjee.md
- [Beyond the Tools: Bridging Product Security Gaps & Calibrating SDLC with Neelu Tripathy](https://www.scaletozero.com/episodes/beyond-the-tools-bridging-product-security-gaps-calibrating-sdlc-with-neelu-tripathy/): Neelu Tripathy, Adobe. Adobe's Neelu Tripathy on bridging product security gaps: foundational controls first, then security built into the platforms and pipelines engineers use. Transcript: https://www.scaletozero.com/episodes/beyond-the-tools-bridging-product-security-gaps-calibrating-sdlc-with-neelu-tripathy.md
- [Ransomware in the AI Era: Evolution, Hidden Weaknesses, and Incident Response with Behnaz Karimi](https://www.scaletozero.com/episodes/ransomware-in-the-ai-era-evolution-hidden-weaknesses-and-incident-response-with-behnaz-karimi/): Behnaz Karimi, Tramarena. Behnaz Karimi (Tramarena) explains how ransomware now targets AI models, pipelines and supply chains, and how incident response must change for AI. Transcript: https://www.scaletozero.com/episodes/ransomware-in-the-ai-era-evolution-hidden-weaknesses-and-incident-response-with-behnaz-karimi.md
- [IAM in 2026: From Anti-Patterns to Autonomous AI Agents with Advait Patel](https://www.scaletozero.com/episodes/iam-in-2026-from-anti-patterns-to-autonomous-ai-agents-with-advait-patel/): Advait Patel, Broadcom. Advait Patel (Broadcom): automate just-in-time access, build IAM up from least privilege, and keep AI agents on low-risk tasks until you can trust them. Transcript: https://www.scaletozero.com/episodes/iam-in-2026-from-anti-patterns-to-autonomous-ai-agents-with-advait-patel.md
- [AI Security: Hype vs. Reality and the Roadmap to CISO with Niyati Daftary](https://www.scaletozero.com/episodes/ai-security-hype-vs-reality-and-the-roadmap-to-ciso-with-niyati-daftary/): Niyati Daftary. Niyati Daftary on separating AI security hype from reality and the career roadmap to becoming a CISO. Transcript: https://www.scaletozero.com/episodes/ai-security-hype-vs-reality-and-the-roadmap-to-ciso-with-niyati-daftary.md
- [Product Security at Scale: Minimizing Friction & Defending AI Integrations with Sana Talwar](https://www.scaletozero.com/episodes/product-security-at-scale-minimizing-friction-defending-ai-integrations-with-sana-talwar/): Sana Talwar. Sana Talwar on product security at scale, reducing friction for developers, and defending AI integrations in the enterprise. Transcript: https://www.scaletozero.com/episodes/product-security-at-scale-minimizing-friction-defending-ai-integrations-with-sana-talwar.md
- [eBPF, MCP Servers, And The Kernel-Level Future of AI Security with Ammar Ekbote](https://www.scaletozero.com/episodes/ebpf-mcp-servers-and-the-kernel-level-future-of-ai-security-with-ammar-ekbote/): Ammar Ekbote, Pinterest. Ammar Ekbote, Cloud Security Engineer at Pinterest, on eBPF, MCP server adoption, and kernel-level AI security monitoring. Transcript: https://www.scaletozero.com/episodes/ebpf-mcp-servers-and-the-kernel-level-future-of-ai-security-with-ammar-ekbote.md
- [The Last9 Story: Scaling Engineering, GTM Strategy, and the Reality of "Overnight Success"](https://www.scaletozero.com/episodes/the-last9-story-scaling-engineering-gtm-strategy-and-the-reality-of-overnight-success/): Nishant Modak, Last9. Nishant Modak, founder and CEO of Last9, on scaling engineering, go-to-market strategy, and the reality of building a startup. Transcript: https://www.scaletozero.com/episodes/the-last9-story-scaling-engineering-gtm-strategy-and-the-reality-of-overnight-success.md
- [AWS vs. GCP IAM Architecture & The Future of Security in 2026 with Sneha Malshetti CISSP](https://www.scaletozero.com/episodes/aws-vs-gcp-iam-architecture-the-future-of-security-in-2026-with-sneha-malshetti-cissp/): Sneha Malshetti, Ethos. Sneha Malshetti, Senior Security Engineer at Ethos, on IAM differences between AWS and GCP and balancing least privilege with velocity. Transcript: https://www.scaletozero.com/episodes/aws-vs-gcp-iam-architecture-the-future-of-security-in-2026-with-sneha-malshetti-cissp.md
- [Zero Trust AI & Human Risk: A Guide to Future-Proofing Security with James Cash](https://www.scaletozero.com/episodes/zero-trust-ai-human-risk-a-guide-to-future-proofing-security-with-james-cash/): James Cash. James Cash on zero trust, AI-driven threats, human risk, and future-proofing organisational security programmes. Transcript: https://www.scaletozero.com/episodes/zero-trust-ai-human-risk-a-guide-to-future-proofing-security-with-james-cash.md
- [Beyond Tech: Building a Security Culture and Navigating AI's Impact with Dakota Riley](https://www.scaletozero.com/episodes/beyond-tech-building-a-security-culture-and-navigating-ais-impact-with-dakota-riley/): Dakota Riley. Dakota Riley on building a security culture, focusing on problems over solutions, and the impact of AI on security teams. Transcript: https://www.scaletozero.com/episodes/beyond-tech-building-a-security-culture-and-navigating-ais-impact-with-dakota-riley.md
- [Kubernetes Security Mastery: Shifting Mindsets for Ephemeral Environments with Dinis Cruz](https://www.scaletozero.com/episodes/kubernetes-security-mastery-shifting-mindsets-for-ephemeral-environments-with-dinis-cruz/): Dinis Cruz. Dinis Cruz on Kubernetes security for ephemeral environments, enriching GenAI with quality data, and threat modelling AI stacks. Transcript: https://www.scaletozero.com/episodes/kubernetes-security-mastery-shifting-mindsets-for-ephemeral-environments-with-dinis-cruz.md
- [Inside the World of an AWS Partner Solution Architect: Career, Partnerships & Scaling with Marketplace](https://www.scaletozero.com/episodes/inside-the-world-of-an-aws-partner-solution-architect-career-partnerships-scaling-with-marketplace/): Lalit Khattar, AWS. Lalit Khattar, Partner Solution Architect at AWS, on career growth, channel partnerships, and scaling through AWS Marketplace. Transcript: https://www.scaletozero.com/episodes/inside-the-world-of-an-aws-partner-solution-architect-career-partnerships-scaling-with-marketplace.md
- [Securing the SDLC in the AI Era: Challenges and Strategies for Modern Enterprises with Ashish Bhadouria](https://www.scaletozero.com/episodes/securing-the-sdlc-in-the-ai-era-challenges-and-strategies-for-modern-enterprises-with-ashish-bhadouria/): Ashish Bhadouria, IKEA. Ashish Bhadouria, Security and Privacy Manager at IKEA, on securing the SDLC in the AI era and defending modern enterprises. Transcript: https://www.scaletozero.com/episodes/securing-the-sdlc-in-the-ai-era-challenges-and-strategies-for-modern-enterprises-with-ashish-bhadouria.md
- [Beyond the Hype: A Founder's Guide to Proactive Security & Leadership](https://www.scaletozero.com/episodes/beyond-the-hype-a-founders-guide-to-proactive-security-leadership/): Ashish Garg. Ashish Garg on proactive security leadership, analysing business risk impact, and cross-team alignment on security roadmaps. Transcript: https://www.scaletozero.com/episodes/beyond-the-hype-a-founders-guide-to-proactive-security-leadership.md
- [Designing Security for GenAI With Security Specialist Solutions Architect - Shweta Thapa](https://www.scaletozero.com/episodes/designing-security-for-genai-with-security-specialist-solutions-architect-shweta-thapa/): Shweta Thapa, AWS. Shweta Thapa, Security Specialist Solutions Architect at AWS, on designing security controls for generative AI applications. Transcript: https://www.scaletozero.com/episodes/designing-security-for-genai-with-security-specialist-solutions-architect-shweta-thapa.md
- [Beyond the Debate: Security as an Enabler & GRC Maturity with Winthrop Welch, Fractional CISO](https://www.scaletozero.com/episodes/beyond-the-debate-security-as-an-enabler-grc-maturity-with-withrop-welch-fractional-ciso/): Winthrop (Andy) Welch. Compliance should feed security, not fight it. Fractional CISO Winthrop (Andy) Welch on GRC maturity, building trust and cutting tool sprawl. Transcript: https://www.scaletozero.com/episodes/beyond-the-debate-security-as-an-enabler-grc-maturity-with-withrop-welch-fractional-ciso.md
- [The Future CISO: AI, Quantum & Becoming a Multidisciplinary Strategist with Patricia Titus](https://www.scaletozero.com/episodes/the-future-ciso-ai-quantum-becoming-a-multidisciplinary-strategist-with-patricia-titus/): Patricia Titus. Patricia Titus on the future CISO, AI and quantum security challenges, and becoming a multidisciplinary security strategist. Transcript: https://www.scaletozero.com/episodes/the-future-ciso-ai-quantum-becoming-a-multidisciplinary-strategist-with-patricia-titus.md
- [Cracking the $3M Deal: Sales Wisdom, AWS Marketplace Success & Life Lessons with Faraz Khan, AWS Marketplace Leader](https://www.scaletozero.com/episodes/cracking-the-3m-deal-sales-wisdom-aws-marketplace-success-life-lessons-with-faraz-khan-aws-marketplace-leader/): Faraz Khan. Faraz Khan on cracking enterprise deals, AWS Marketplace success, and go-to-market strategy for security startups. Transcript: https://www.scaletozero.com/episodes/cracking-the-3m-deal-sales-wisdom-aws-marketplace-success-life-lessons-with-faraz-khan-aws-marketplace-leader.md
- [Zero to Zero Trust: Implementation, Challenges & AI's Future Role with Uttej Badwane](https://www.scaletozero.com/episodes/zero-to-zero-trust-implementation-challenges-ais-future-role-with-uttej-badwane/): Uttej Badwane, Carta. Uttej Badwane, Senior Security Engineer at Carta, on zero-trust implementation challenges and the future role of AI in security. Transcript: https://www.scaletozero.com/episodes/zero-to-zero-trust-implementation-challenges-ais-future-role-with-uttej-badwane.md
- [IAM, AI & Cloud Security: Unlocking Scale & Battling New Threats with Stephen Kuenzli](https://www.scaletozero.com/episodes/iam-ai-cloud-security-unlocking-scale-battling-new-threats-with-stephen-kuenzli/): Stephen Kuenzli. Stephen Kuenzli on IAM, AI-driven cloud security, and using agents and MCPs to improve security decision-making at scale. Transcript: https://www.scaletozero.com/episodes/iam-ai-cloud-security-unlocking-scale-battling-new-threats-with-stephen-kuenzli.md
- [Beyond the Spreadsheet: Mastering Cybersecurity Risk Management with Joseph Haske](https://www.scaletozero.com/episodes/beyond-the-spreadsheet-mastering-cybersecurity-risk-management-with-joseph-haske/): Joseph Haske. Joseph Haske on cybersecurity risk management, stakeholder communication, and qualitative-vs-quantitative frameworks. Transcript: https://www.scaletozero.com/episodes/beyond-the-spreadsheet-mastering-cybersecurity-risk-management-with-joseph-haske.md
- [AI in AppSec: The Paradigm Shift with Brad Geesaman](https://www.scaletozero.com/episodes/ai-in-appsec-the-paradigm-shift-with-brad-geesaman/): Brad Geesaman. Brad Geesaman on adopting AI in application security, managing non-deterministic LLMs, and knowing when agentic AI fits. Transcript: https://www.scaletozero.com/episodes/ai-in-appsec-the-paradigm-shift-with-brad-geesaman.md
- [The Good and Lasting Cloud Security with Lalit Kumar](https://www.scaletozero.com/episodes/the-good-and-lasting-cloud-security-with-lalit-kumar/): Lalit Kumar. Lalit Kumar on building good and lasting cloud security, transforming AWS India Security, and advising CXOs on cloud posture. Transcript: https://www.scaletozero.com/episodes/the-good-and-lasting-cloud-security-with-lalit-kumar.md
- [Scaling Security Champions: From Zero to Hero With Bonnie Viteri](https://www.scaletozero.com/episodes/scaling-security-champions-from-zero-to-hero-with-bonnie-viteri/): Bonnie Viteri. Bonnie Viteri on building a security-champions programme from scratch, enablement vs empowerment, and measuring impact. Transcript: https://www.scaletozero.com/episodes/scaling-security-champions-from-zero-to-hero-with-bonnie-viteri.md
- [Securing Production: A Deep Dive into AWS IAM Best Practices with Rowan Udell](https://www.scaletozero.com/episodes/securing-production-a-deep-dive-into-aws-iam-best-practices-with-rowan-udell/): Rowan Udell. Rowan Udell on AWS IAM best practices for production environments, least-privilege strategies, and role-based access patterns. Transcript: https://www.scaletozero.com/episodes/securing-production-a-deep-dive-into-aws-iam-best-practices-with-rowan-udell.md
- [The Secrets of Product Security with Anshuman Bhartiya](https://www.scaletozero.com/episodes/anshuman-bhartiya/): Anshuman Bhartiya. Anshuman Bhartiya on product security, risk-driven prioritisation, and building secure-by-default development practices. Transcript: https://www.scaletozero.com/episodes/anshuman-bhartiya.md
- [The Magical World Of Digital Forensics With Jason Jordaan](https://www.scaletozero.com/episodes/the-magical-world-of-digital-forensics-with-jason-jordaan/): Jason Jordaan. Jason Jordaan on digital forensics, the importance of meticulous documentation, and preparing organisations for investigations. Transcript: https://www.scaletozero.com/episodes/the-magical-world-of-digital-forensics-with-jason-jordaan.md
- [From Reactive to Proactive: A Conversation on Modern Threat Detection](https://www.scaletozero.com/episodes/from-reactive-to-proactive-a-conversation-on-modern-threat-detection/): Reanna Schultz, CyberSpeak Labs. Reanna Schultz, founder of CyberSpeak Labs, on modern threat detection, false-positive handling, and staying ahead of threats. Transcript: https://www.scaletozero.com/episodes/from-reactive-to-proactive-a-conversation-on-modern-threat-detection.md
- [The Human Element: AI, Deepfakes, and the Evolving Threat Landscape with Perry Carpenter](https://www.scaletozero.com/episodes/the-human-element-ai-deepfakes-and-the-evolving-threat-landscape-with-perry-carpenter/): Perry Carpenter. Perry Carpenter on the human element in security, AI-powered deepfakes, and the evolving social-engineering threat landscape. Transcript: https://www.scaletozero.com/episodes/the-human-element-ai-deepfakes-and-the-evolving-threat-landscape-with-perry-carpenter.md
- [From Awareness to Action: Building a Resilient Security Culture with Mauricio Duarte](https://www.scaletozero.com/episodes/from-awareness-to-action-building-a-resilient-security-culture-with-mauricio-duarte/): Mauricio Duarte. Mauricio Duarte on building resilient security culture, behaviour-based awareness programmes, and incident-response speed vs accuracy. Transcript: https://www.scaletozero.com/episodes/from-awareness-to-action-building-a-resilient-security-culture-with-mauricio-duarte.md
- [From Detection to Recovery: Understanding Incident Response Lifecycle with Giorgio Perticone](https://www.scaletozero.com/episodes/from-detection-to-recovery-understanding-incident-response-lifecycle-with-giorgio-perticone/): Giorgio Perticone. Giorgio Perticone on the incident-response lifecycle from detection to recovery, staying calm under pressure, and containment. Transcript: https://www.scaletozero.com/episodes/from-detection-to-recovery-understanding-incident-response-lifecycle-with-giorgio-perticone.md
- [The CISO's Dilemma: Balancing Security, Innovation, and Burnout with Ross Young](https://www.scaletozero.com/episodes/the-cisos-dilemma-balancing-security-innovation-and-burnout-with-ross-young/): Ross Young. Ross Young on the CISO's dilemma — balancing security, innovation, and burnout — and building cross-functional champions. Transcript: https://www.scaletozero.com/episodes/the-cisos-dilemma-balancing-security-innovation-and-burnout-with-ross-young.md
- [Unraveling the Mysteries of Privacy Engineering: A Deep Dive with Apoorvaa Deshpande](https://www.scaletozero.com/episodes/unraveling-the-mysteries-of-privacy-engineering-a-deep-dive-with-apoorvaa-deshpande/): Apoorvaa Deshpande, Google Cloud. Apoorvaa Deshpande, Senior Privacy Engineer at Google Cloud, on privacy engineering, privacy by design, and GenAI data governance. Transcript: https://www.scaletozero.com/episodes/unraveling-the-mysteries-of-privacy-engineering-a-deep-dive-with-apoorvaa-deshpande.md
- [Getting Started with Cloud Pentesting with Scott Weston](https://www.scaletozero.com/episodes/getting-started-with-cloud-pentesting-with-scott-weston/): Scott Weston, NetSPI. Scott Weston, senior consultant at NetSPI, on cloud penetration testing, the GCPwn tool he created, and how to get started with cloud security testing. Transcript: https://www.scaletozero.com/episodes/getting-started-with-cloud-pentesting-with-scott-weston.md
- [Mastering Zero Trust: A Comprehensive Guide with Dr. Natalia Semenova](https://www.scaletozero.com/episodes/mastering-zero-trust-a-comprehensive-guide-with-dr-natalia-semenova/): Dr. Natalia Semenova. Dr. Natalia Semenova on zero-trust architecture, the challenges of asset and identity discovery, and identity as the core of zero trust. Transcript: https://www.scaletozero.com/episodes/mastering-zero-trust-a-comprehensive-guide-with-dr-natalia-semenova.md
- [The Ultimate Guide to Cloud Security: A Deep Dive with Richard Stiennon](https://www.scaletozero.com/episodes/the-ultimate-guide-to-cloud-security-a-deep-dive-with-richard-stiennon/): Richard Stiennon. Richard Stiennon on the ultimate guide to cloud security, the evolving threat landscape, and building defence in depth. Transcript: https://www.scaletozero.com/episodes/the-ultimate-guide-to-cloud-security-a-deep-dive-with-richard-stiennon.md
- [Mastering Cloud Incident Response with Hilal Ahmad Lone](https://www.scaletozero.com/episodes/mastering-cloud-incident-response-with-hilal-ahmad-lone/): Hilal Ahmad. Cloud incident response with Hilal Ahmad — monitoring MTTD and MTTR, and why out-of-the-box security tools are never enough. Transcript: https://www.scaletozero.com/episodes/mastering-cloud-incident-response-with-hilal-ahmad-lone.md
- [Rethinking the Framework: Addressing Inherent Cybersecurity Risks with Gretchen Ruck](https://www.scaletozero.com/episodes/rethinking-the-framework-addressing-inherent-cybersecurity-risks-with-gretchen-ruck/): Gretchen Ruck. Gretchen Ruck on rethinking cybersecurity frameworks, addressing inherent risk, and measuring security effectiveness. Transcript: https://www.scaletozero.com/episodes/rethinking-the-framework-addressing-inherent-cybersecurity-risks-with-gretchen-ruck.md
- [Auto Remediation on AWS with Lily Chau](https://www.scaletozero.com/episodes/auto-remediation-on-aws-with-lily-chau/): Lily Chau. Lily Chau on auto-remediation in AWS, overcoming stakeholder buy-in challenges, and prioritising security fixes. Transcript: https://www.scaletozero.com/episodes/auto-remediation-on-aws-with-lily-chau.md
- [Demystifying Identity and Access Management with John Giglio](https://www.scaletozero.com/episodes/demistifying-identity-and-access-management-with-john-giglio/): John Giglio. John Giglio on demystifying IAM, the security-vs-compliance debate, and data-perimeter controls for read, write, and download. Transcript: https://www.scaletozero.com/episodes/demistifying-identity-and-access-management-with-john-giglio.md
- [The intersection of Security and Human Behavior ft. Classie Clark](https://www.scaletozero.com/episodes/intersection-of-security-and-human-behavior-ft-classie-clark/): Cassie Clark. Cassie Clark on the intersection of security and human behaviour, choice architecture, and continuous awareness programmes. Transcript: https://www.scaletozero.com/episodes/intersection-of-security-and-human-behavior-ft-classie-clark.md
- [Building Security Foundation and Security Boundaries with Kushagra Sharma](https://www.scaletozero.com/episodes/building-security-foundation-and-security-boundaries-with-kushagra-sharma/): Kushagra Sharma, Booking.com. Kushagra Sharma, Senior Platform Security Engineer at Booking.com, on security baselines, boundaries, and layered defences. Transcript: https://www.scaletozero.com/episodes/building-security-foundation-and-security-boundaries-with-kushagra-sharma.md
- [Trust & Security: The Cornerstones of a Resilient Organization! With Sandeep Agarwal](https://www.scaletozero.com/episodes/trust-security-the-cornerstones-of-a-resilient-organization-with-sandeep-agarwal/): Sandeep Agarwal. Sandeep Agarwal on trust and security as the cornerstones of organisational resilience, leadership alignment, and building durable programmes. Transcript: https://www.scaletozero.com/episodes/trust-security-the-cornerstones-of-a-resilient-organization-with-sandeep-agarwal.md
- [Understanding the Continuous Security and Incident Response Landscape](https://www.scaletozero.com/episodes/understanding-the-continuous-security-and-incident-response-landscape/): Jan Hertsens, AWS. Jan Hertsens, Senior Security Consultant at AWS, on continuous security, the compliance debate, and incident-response segmentation. Transcript: https://www.scaletozero.com/episodes/understanding-the-continuous-security-and-incident-response-landscape.md
- [Network Security Fortress: Master Network Segmentation with Tom Adamski](https://www.scaletozero.com/episodes/network-security-fortress-master-network-segmentation-with-tom-adamski/): Tom Adamski. Tom Adamski on network segmentation, risk assessment before design, and layering AWS security tools for defence in depth. Transcript: https://www.scaletozero.com/episodes/network-security-fortress-master-network-segmentation-with-tom-adamski.md
- [Understanding the role of logging and monitoring in detective controls with Kailash Havildar](https://www.scaletozero.com/episodes/understanding-the-role-of-logging-and-monitoring-in-detective-controls-with-kailash-havildar/): Kailash Havildar. Kailash Havildar on logging, monitoring, and detective controls in cloud security — what to capture and how to act on it. Transcript: https://www.scaletozero.com/episodes/understanding-the-role-of-logging-and-monitoring-in-detective-controls-with-kailash-havildar.md
- [Building Cybersecurity Teams with Matthew Marji](https://www.scaletozero.com/episodes/building-cybersecurity-teams-with-matthew-marji/): Matthew Marji. Matthew Marji on building cybersecurity teams, evaluating communication skills in hiring, and aligning security with business. Transcript: https://www.scaletozero.com/episodes/building-cybersecurity-teams-with-matthew-marji.md
- [Understanding Threat Modeling and Secure by Design Concept with Adam Shostack](https://www.scaletozero.com/episodes/understanding-threat-modeling-and-more/): Adam Shostack. Adam Shostack on threat modelling fundamentals, secure-by-design principles, and making threat analysis accessible to all teams. Transcript: https://www.scaletozero.com/episodes/understanding-threat-modeling-and-more.md
- [Conquering Enterprise Risk Management with Amit Subhanje](https://www.scaletozero.com/episodes/conquering-enterprise-risk-management-with-amit-subhanje/): Amit Subhanje. Amit Subhanje on enterprise risk management, balancing proactive and reactive strategies, and shared security responsibility. Transcript: https://www.scaletozero.com/episodes/conquering-enterprise-risk-management-with-amit-subhanje.md
- [Exploring the World of Incident Response and Detection with Pablo Vidal](https://www.scaletozero.com/episodes/exploring-the-world-of-incident-response-and-detection-with-pablo-vidal/): Pablo Vidal. Pablo Vidal on incident response and detection, cross-team collaboration, and hiring for mutual fit in security roles. Transcript: https://www.scaletozero.com/episodes/exploring-the-world-of-incident-response-and-detection-with-pablo-vidal.md
- [Building Cybersecurity Teams and Virtuous Circle With Clients ft. Jesse Miller](https://www.scaletozero.com/episodes/building-cybersecurity-teams-and-virtus/): Jesse Miller. Jesse Miller on building cybersecurity teams, creating a virtuous cycle with clients, and taking a risk-centric approach. Transcript: https://www.scaletozero.com/episodes/building-cybersecurity-teams-and-virtus.md
- [Beyond the Basics: Understanding Threat Hunting and Security Research with Josh Pyorre](https://www.scaletozero.com/episodes/beyond-the-basics-understanding-threat-hunting-and-security-research-with-josh-pyorre/): Josh Pyorre. Josh Pyorre on threat hunting, creative security research, and the role of GenAI in uncovering new attack vectors. Transcript: https://www.scaletozero.com/episodes/beyond-the-basics-understanding-threat-hunting-and-security-research-with-josh-pyorre.md
- [Keeping Pace with Cloud Security: A Guide to Maturity Models with Rich Mogull](https://www.scaletozero.com/episodes/keeping-pace-with-cloud-security-a-guide-to-maturity-models-with-rich-mogull/): Rich Mogull, DisruptOps. Rich Mogull on cloud security maturity models, the mindset shift from on-prem, and setting realistic expectations with leadership. Transcript: https://www.scaletozero.com/episodes/keeping-pace-with-cloud-security-a-guide-to-maturity-models-with-rich-mogull.md
- [The Cloud Security Saga with Joseph South](https://www.scaletozero.com/episodes/the-cloud-security-saga-with-joseph-south/): Joseph South. Joseph South on the cloud security journey, starting with common misconfigurations, and using the Cloud Controls Matrix. Transcript: https://www.scaletozero.com/episodes/the-cloud-security-saga-with-joseph-south.md
- [Understanding the concepts of Supply Chain Security, Container Images, SBOMs, and more with Aung](https://www.scaletozero.com/episodes/understanding-the-concepts-of-supply-chain-security-container-images-sboms-and-more-with-aung/): Htet Naing Aung. Htet Naing Aung on supply-chain security, container-image signing, SBOMs, and using SCA tools in CI/CD pipelines. Transcript: https://www.scaletozero.com/episodes/understanding-the-concepts-of-supply-chain-security-container-images-sboms-and-more-with-aung.md
- [Navigating the Identity and Access Management Landscape with Joseph South](https://www.scaletozero.com/episodes/navigating-the-identity-and-access-management-landscape-with-joseph/): Joseph South. Joseph South on the cloud IAM landscape, why IAM is the new perimeter, and getting leadership buy-in for security practices. Transcript: https://www.scaletozero.com/episodes/navigating-the-identity-and-access-management-landscape-with-joseph.md
- [Unlock the Secrets to Successful Cloud Security with Andre Rall](https://www.scaletozero.com/episodes/unlock-the-secrets-to-successful-cloud-security-with-andre-rall/): Andre Rall. Andre Rall on the secrets to successful cloud security, building strong foundations, and aligning security with cloud strategy. Transcript: https://www.scaletozero.com/episodes/unlock-the-secrets-to-successful-cloud-security-with-andre-rall.md
- [Guardian Code: Safeguarding Applications in the AI Era with Jim Manico](https://www.scaletozero.com/episodes/guardian-code-safeguarding-applications-in-the-ai-era-with-jim-manico/): Jim Manico. Jim Manico on safeguarding applications in the AI era, verifying AI-generated code, and applying OWASP best practices on top of frameworks. Transcript: https://www.scaletozero.com/episodes/guardian-code-safeguarding-applications-in-the-ai-era-with-jim-manico.md
- [Guardians of Trust: Navigating Third-Party Risk Across Business Realms with Jeffrey Wheatman](https://www.scaletozero.com/episodes/guardians-of-trust-navigating-third-party-risk-across-business-realms-with-jeff/): Jeffrey Wheatman, Black Kite. Jeffrey Wheatman, Cyber Risk Evangelist at Black Kite, on third-party risk management, vendor prioritisation, and procurement decisions. Transcript: https://www.scaletozero.com/episodes/guardians-of-trust-navigating-third-party-risk-across-business-realms-with-jeff.md
- [Security that speaks to heart; understanding emotional intelligence and third-party risk management with Shivani Arni](https://www.scaletozero.com/episodes/security-that-speaks-to-heart-understanding-emotional-intelligence-and-third-party-risk-management-with/): Shivani Arni, TransUnion CIBIL. Shivani Arni, CISO at TransUnion CIBIL, on emotional intelligence in security leadership and third-party risk management. Transcript: https://www.scaletozero.com/episodes/security-that-speaks-to-heart-understanding-emotional-intelligence-and-third-party-risk-management-with.md
- [Identity and Access Management in the Cloud: Beyond Mere Access Control](https://www.scaletozero.com/episodes/identity-and-access-management-in-the-cloud-beyond-mere-access-control/): Chad Lorenc, AWS Professional Services. Chad Lorenc, Security Practice Manager at AWS, on cloud IAM beyond access control, showing value to leadership, and production-account security. Transcript: https://www.scaletozero.com/episodes/identity-and-access-management-in-the-cloud-beyond-mere-access-control.md
- [Unleash the power of DevSecOps and Cloud-Native Security with Kayra Otaner](https://www.scaletozero.com/episodes/unleash-the-power-of-devsecops-and-cloud-native-security-with-kayra-otaner/): Kayra Otaner. Kayra Otaner on DevSecOps, cloud-native security, and unleashing security capabilities without slowing engineering teams. Transcript: https://www.scaletozero.com/episodes/unleash-the-power-of-devsecops-and-cloud-native-security-with-kayra-otaner.md
- [Revolutionize your approach to SDLC using DevSecOps techniques with Matt Tesauro](https://www.scaletozero.com/episodes/revolutionize-your-approach-to-sdlc-using-devsecops-techniques-with-matt-tesauro/): Matt Tesauro. Matt Tesauro on revolutionising the SDLC with DevSecOps, automation for team velocity, and training security professionals. Transcript: https://www.scaletozero.com/episodes/revolutionize-your-approach-to-sdlc-using-devsecops-techniques-with-matt-tesauro.md
- [Shielding Your Supply Chain: Strengthening Security Measures with Francois Proulx](https://www.scaletozero.com/episodes/francois/): François Proulx, Boost Security. François Proulx, Senior Product Security Engineer at Boost Security, on supply-chain security, threat modelling, and SBOMs. Transcript: https://www.scaletozero.com/episodes/francois.md
- [Understanding Vulnerability Management, Supply Chain Security, & SBOMs with Yotam Perkal](https://www.scaletozero.com/episodes/understanding-vulnerability-management-supply-chain-security-sboms-with-yotam-perkal/): Yotam Perkal. Yotam Perkal on vulnerability management, supply-chain security, SBOMs, and prioritising the risks that matter most. Transcript: https://www.scaletozero.com/episodes/understanding-vulnerability-management-supply-chain-security-sboms-with-yotam-perkal.md
- [Navigating Threat Modeling and Vulnerability Management Challenges with Kalyani Pawar](https://www.scaletozero.com/episodes/navigating-threat-modeling-and-vulnerability-management-challenges-with-kalyani-pawar/): Kalyani Pawar. Kalyani Pawar on threat modelling, scaling security with checklists and champions, and celebrating small wins. Transcript: https://www.scaletozero.com/episodes/navigating-threat-modeling-and-vulnerability-management-challenges-with-kalyani-pawar.md
- [Understanding the Role of Asset Management and Kubernetes in the Cloud with Kesten Broughton](https://www.scaletozero.com/episodes/understanding-the-role-of-asset-management-and-kubernetes-in-cloud-with-kesten-broughton/): Kesten Broughton. Kesten Broughton on asset management, Kubernetes in the cloud, and why visibility is the foundation of cloud security. Transcript: https://www.scaletozero.com/episodes/understanding-the-role-of-asset-management-and-kubernetes-in-cloud-with-kesten-broughton.md
- [Practical strategies for defending a Kubernetes cluster with Divyanshu Shukla](https://www.scaletozero.com/episodes/practical-strategies-of-defending-a-kubernetes-cluster-with-divyanshu-shukla/): Divyanshu Shukla. Divyanshu Shukla on practical strategies for defending Kubernetes clusters, detection techniques, and open-source defence tools. Transcript: https://www.scaletozero.com/episodes/practical-strategies-of-defending-a-kubernetes-cluster-with-divyanshu-shukla.md
- [Restorative Justice Framework: A New Way to Solve Conflict with Michele Chubirka](https://www.scaletozero.com/episodes/restorative-justice-a-new-way-to-solve-conflict/): Michele Chubirka, Google. Michele Chubirka on restorative justice as a new framework for resolving cybersecurity conflict and restoring team trust. Transcript: https://www.scaletozero.com/episodes/restorative-justice-a-new-way-to-solve-conflict.md
- [Workshop on Attacking a Kubernetes Cluster](https://www.scaletozero.com/episodes/workshop-on-attacking-a-kubernetes-cluster/): Divyanshu Shukla. Divyanshu Shukla on red-teaming Kubernetes clusters, understanding attacker mindset, and exploiting common cluster weaknesses. Transcript: https://www.scaletozero.com/episodes/workshop-on-attacking-a-kubernetes-cluster.md
- [Master the art of Incident Response, Digital Forensics, and Threat Intelligence with Gerard Johansen](https://www.scaletozero.com/episodes/master-the-art-of-incident-response-digital-forensics-threat-intelligence-gerard-johansen/): Gerard Johansen. Gerard Johansen on incident response, digital forensics, threat intelligence, and training engineers on evidence collection. Transcript: https://www.scaletozero.com/episodes/master-the-art-of-incident-response-digital-forensics-threat-intelligence-gerard-johansen.md
- [Attacking and Defending Kubernetes Cluster with Divyanshu Shukla](https://www.scaletozero.com/episodes/attacking-and-defending-kubernetes-cluster-with-divyanshu-shukla-scaletozero/): Divyanshu Shukla. Divyanshu Shukla on attacking and defending Kubernetes clusters in a hands-on workshop-style session. Transcript: https://www.scaletozero.com/episodes/attacking-and-defending-kubernetes-cluster-with-divyanshu-shukla-scaletozero.md
- [Cloud-Native Realm: A Comprehensive Look at Kubernetes Security with Steve Giguere](https://www.scaletozero.com/episodes/cloud-native-realm-a-comprehensive-look-at-kubernetes-security-with-steve-giguere/): Steve Giguere. Steve Giguere on Kubernetes security, when monoliths beat containers, and vetting open-source dependencies with SBOMs. Transcript: https://www.scaletozero.com/episodes/cloud-native-realm-a-comprehensive-look-at-kubernetes-security-with-steve-giguere.md
- [Digging Deeper on DevOps & DevSecOps with Kyle Fossum](https://www.scaletozero.com/episodes/digging-deeper-with-devops-devsecops-kyle-fossum-s2-ep5-scale-to-zero/): Kyle Fossum. Kyle Fossum on DevOps and DevSecOps practices, self-serve security tooling, and why hardware security keys beat SMS-based MFA. Transcript: https://www.scaletozero.com/episodes/digging-deeper-with-devops-devsecops-kyle-fossum-s2-ep5-scale-to-zero.md
- [Master Application Security, Threat Modeling, and Security Resilience with Dustin Lehr](https://www.scaletozero.com/episodes/master-application-security-threat-modeling-and-security-resilience/): Dustin Lehr. Dustin Lehr on application security, threat modelling, and building security-champion programmes through long-term relationships. Transcript: https://www.scaletozero.com/episodes/master-application-security-threat-modeling-and-security-resilience.md
- [Uncovering The Secrets Of Threat Modeling With Brook Schoenfield](https://www.scaletozero.com/episodes/uncovering-the-secrets-of-threat-modeling-with-brook-schoenfield/): Brook Schoenfield. Brook Schoenfield on the secrets of effective threat modelling, integrating threat analysis into design, and scaling the practice. Transcript: https://www.scaletozero.com/episodes/uncovering-the-secrets-of-threat-modeling-with-brook-schoenfield.md
- [Comprehending Security Culture with Ariel Shin](https://www.scaletozero.com/episodes/comprehending-security-culture-with-ariel-shin/): Ariel Shin. Ariel Shin on balancing production speed with security, the advisory role of security teams, and the value of empathy. Transcript: https://www.scaletozero.com/episodes/comprehending-security-culture-with-ariel-shin.md
- [Learning Application Security With Chris Romeo](https://www.scaletozero.com/episodes/learning-application-security-with-chriss-romea/): Chris Romeo. Chris Romeo on application security beyond tools, prioritising with a data-driven approach, and starting with open source. Transcript: https://www.scaletozero.com/episodes/learning-application-security-with-chriss-romea.md
- [Data Loss, DevOps, and More!](https://www.scaletozero.com/episodes/data-logs-devops-and-more/): Chris Hodson, Cyberhaven. Chris Hodson, CSO of Cyberhaven, on threat modelling across the SDLC, communicating security value, and DevSecOps trade-offs. Transcript: https://www.scaletozero.com/episodes/data-logs-devops-and-more.md
- [Understanding Jupyter Notebooks with Ashwin Patil](https://www.scaletozero.com/episodes/understanding-jupyter-notebooks-with-ashwin-patil/): Ashwin Patil. Ashwin Patil on security applications of Jupyter notebooks, data analysis for threat detection, and interactive investigation workflows. Transcript: https://www.scaletozero.com/episodes/understanding-jupyter-notebooks-with-ashwin-patil.md
- [Understanding Threat Modeling with Jeevan Singh](https://www.scaletozero.com/episodes/understanding-threat-modeling-with-jeevan-singh/): Jeevan Singh. Jeevan Singh on threat modelling, integrating security into the development workflow, and scaling with limited resources. Transcript: https://www.scaletozero.com/episodes/understanding-threat-modeling-with-jeevan-singh.md
- [Vulnerability management deep dive with Walter Haydock](https://www.scaletozero.com/episodes/vulnerability-management-deep-dive-with-walter-haydock/): Walter Haydock. Walter Haydock on vulnerability management, prioritisation strategies, and building a vulnerability programme that scales. Transcript: https://www.scaletozero.com/episodes/vulnerability-management-deep-dive-with-walter-haydock.md
- [Into the Dark Web with Brett Johnson](https://www.scaletozero.com/episodes/into-the-dark-web-with-brett-johnson/): Brett Johnson. Brett Johnson on the dark web, credential-stuffing attacks, MFA bypass techniques, and why humans are the weakest link. Transcript: https://www.scaletozero.com/episodes/into-the-dark-web-with-brett-johnson.md
- [Dealing with Social Engineering Attacks with Emily Zakkak](https://www.scaletozero.com/episodes/dealing-with-social-engineering-attacks-with-emily-zakkak/): Emily Zakkak, Senowit. Emily Zakkak, cybersecurity specialist at Senowit, on defending against social engineering, phishing, and MFA best practices. Transcript: https://www.scaletozero.com/episodes/dealing-with-social-engineering-attacks-with-emily-zakkak.md
- [Blue Team And Digital Forensics with Karan Dwivedi](https://www.scaletozero.com/episodes/blue-team-and-digital-forensics-with-karan-dwivedi/): Karan Dwivedi. Karan Dwivedi on blue-team operations, partnering with red teams, and preserving forensic data accuracy. Transcript: https://www.scaletozero.com/episodes/blue-team-and-digital-forensics-with-karan-dwivedi.md
- [Discussing GRC and Data Privacy With Alyssa Ahmann](https://www.scaletozero.com/episodes/discussing-grc-and-data-privacy-with-alyssa-ahmann/): Alyssa Ahmann. Alyssa Ahmann on GRC setup, data privacy, and why documentation and training underpin successful security programmes. Transcript: https://www.scaletozero.com/episodes/discussing-grc-and-data-privacy-with-alyssa-ahmann.md
- [AWS Security And Monitoring With Rodrigo Montoro](https://www.scaletozero.com/episodes/aws-security-and-monitoring-with-rodrigo-montoro/): Rodrigo Montoro. Rodrigo Montoro on AWS security monitoring, threat modelling for new services, and restricting high-impact IAM permissions. Transcript: https://www.scaletozero.com/episodes/aws-security-and-monitoring-with-rodrigo-montoro.md
- [Learning Red, Blue, and Purple Team With Paul Dyer](https://www.scaletozero.com/episodes/learning-red-blue-and-purple-team-with-paul-dyer/): Paul Dyer. Paul Dyer on red, blue, and purple team operations, threat-landscape awareness, and open-source security with SBOMs. Transcript: https://www.scaletozero.com/episodes/learning-red-blue-and-purple-team-with-paul-dyer.md
- [Understanding Kubernetes and Governance With Jim Bugwadia](https://www.scaletozero.com/episodes/kubernetes-governance-jim-bugwadia/): Jim Bugwadia. Jim Bugwadia on Kubernetes governance, workload security responsibilities, and image-signing best practices with Sigstore. Transcript: https://www.scaletozero.com/episodes/kubernetes-governance-jim-bugwadia.md
- [Prepare , Plan and Budget Organizational Security with Nader Zaveri](https://www.scaletozero.com/episodes/org-security-culture-nader-zaveri/): Nader Zaveri. Nader Zaveri on organisational security culture, planning and budgeting for security, and incident-response preparedness. Transcript: https://www.scaletozero.com/episodes/org-security-culture-nader-zaveri.md
- [Data Privacy And Governance With Adam Smith](https://www.scaletozero.com/episodes/data-privacy-and-governance-with-adam-smith/): Adam Smith. Adam Smith on data privacy governance, building personal-data inventories, and fostering a privacy-first culture. Transcript: https://www.scaletozero.com/episodes/data-privacy-and-governance-with-adam-smith.md
- [Kubernetes Security And Misconfigurations With Jimmy Mesta](https://www.scaletozero.com/episodes/kubernetes-security-and-misconfigurations-with-jimmy-mesta/): Jimmy Mesta. Jimmy Mesta on Kubernetes misconfigurations, continuous security checks, and when to choose managed K8s over self-hosting. Transcript: https://www.scaletozero.com/episodes/kubernetes-security-and-misconfigurations-with-jimmy-mesta.md
- [Network Perimeter Security With Syeed Shareef](https://www.scaletozero.com/episodes/network-perimeter-security-with-syeed-sharee/): Syed Shareef, AWS. Syed Shareef, Senior Security Engineer at AWS, on data perimeters, combining SCP and IAM policies, and use-case-driven security. Transcript: https://www.scaletozero.com/episodes/network-perimeter-security-with-syeed-sharee.md
- [Focusing On Cloud Vulnerability With Ray Espinoza](https://www.scaletozero.com/episodes/focusing-on-cloud-vulnerability-with-ray-espinoza/): Ray Espinoza. Ray Espinoza on cloud vulnerability management, leading with empathy, and transparent communication during incidents. Transcript: https://www.scaletozero.com/episodes/focusing-on-cloud-vulnerability-with-ray-espinoza.md
- [Measuring Security Debt With Garrett Smiley](https://www.scaletozero.com/episodes/measuring-security-debt-with-garrett-smiley/): Garrett Smiley. Garrett Smiley on measuring security debt, context-driven risk prioritisation, and using KRIs over KPIs for security teams. Transcript: https://www.scaletozero.com/episodes/measuring-security-debt-with-garrett-smiley.md
- [Mastering Organizational Security Culture with Trupti Shiralkar](https://www.scaletozero.com/episodes/mastering-organizational-security-culture-with-trupti-shiralkar/): Trupti Shiralkar. Trupti Shiralkar on organisational security culture, joint backlog reviews for security debt, and supply-chain security standards. Transcript: https://www.scaletozero.com/episodes/mastering-organizational-security-culture-with-trupti-shiralkar.md
- [Setting the Line of Defence  in Cloud Security with Charles Mendoza](https://www.scaletozero.com/episodes/setting-the-line-of-defence-in-cloud-security-with-charles-mendoza/): Charles Mendoza. Charles Mendoza on setting the line of defence in cloud security, layered controls, and incident-response readiness. Transcript: https://www.scaletozero.com/episodes/setting-the-line-of-defence-in-cloud-security-with-charles-mendoza.md
- [Security debt and prioritizing risks with Aakash Yadav](https://www.scaletozero.com/episodes/security-debt-and-prioritizing-risks-with-aakash-yadav/): Aakash Yadav. Aakash Yadav on security debt, risk prioritisation, and building a pragmatic approach to reducing organisational risk. Transcript: https://www.scaletozero.com/episodes/security-debt-and-prioritizing-risks-with-aakash-yadav.md
- [Understanding Information Security and Risk Management With Parul Khanna](https://www.scaletozero.com/episodes/understanding-information-security-and-risk-management-with-parul-khanna/): Parul Khanna. Parul Khanna on information security, risk management, and bridging the gap between incident response and business priorities. Transcript: https://www.scaletozero.com/episodes/understanding-information-security-and-risk-management-with-parul-khanna.md
- [Big Mistakes in Cybersecurity With Mel Reyes](https://www.scaletozero.com/episodes/big-mistakes-in-cybersecurity-with-mel-reyes/): Mel Reyes. Mel Reyes on the biggest mistakes in cybersecurity, top-down security mandates, and setting up foundations for startups. Transcript: https://www.scaletozero.com/episodes/big-mistakes-in-cybersecurity-with-mel-reyes.md
- [Part 2 - Zero Trust Architecture With Vincent Romney](https://www.scaletozero.com/episodes/zero-trust-architecture-vincent-romney/): Vincent Romney, Nu Skin Enterprises. Vincent Romney, Head of Global Security Architecture at Nu Skin, on zero-trust architecture and overcoming organisational resistance. Transcript: https://www.scaletozero.com/episodes/zero-trust-architecture-vincent-romney.md
- [Zero Trust Architecture With Vincent Romney](https://www.scaletozero.com/episodes/zero-trust-architecture-with-vincent-romney/): Vincent Romney, Nu Skin Enterprises. Vincent Romney, Head of Global Security Architecture at Nu Skin, on zero-trust architecture, programme design, and security planning. Transcript: https://www.scaletozero.com/episodes/zero-trust-architecture-with-vincent-romney.md
- [Preparing For Potential Cloud Data Breaches With Nat Shere](https://www.scaletozero.com/episodes/cloud-security-data-breaches-with-nat-shere/): Nat Shere. Nat Shere on preparing for cloud data breaches, incident response planning, and lowering MTTD and MTTR. Transcript: https://www.scaletozero.com/episodes/cloud-security-data-breaches-with-nat-shere.md
- [Cloud Security Planning With An Ethical Hacker Aseem Shrey](https://www.scaletozero.com/episodes/cloud-security-simplified-with-aseem-shrey/): Aseem Shrey, Rippling. Aseem Shrey, security engineer at Rippling, on responding to ethical hacker reports, preparing for data breaches, and building a security career. Transcript: https://www.scaletozero.com/episodes/cloud-security-simplified-with-aseem-shrey.md
- [Solutions To Roadblocks In Cloud Security With Chris Neggel](https://www.scaletozero.com/episodes/roadblocks-in-cloud-security-with-chris-neggel/): Chris Neggel, Okta. Chris Neggel, Regional CSO at Okta, on the roadblocks teams face in cloud security and strategies to overcome them. Transcript: https://www.scaletozero.com/episodes/roadblocks-in-cloud-security-with-chris-neggel.md
- [Cloud Security Reviewed With Ski](https://www.scaletozero.com/episodes/cloud-security-reviewed-with-ski/): Ski. Ski on building a security-centric culture, improving cross-team relationships, and aligning certifications with controls. Transcript: https://www.scaletozero.com/episodes/cloud-security-reviewed-with-ski.md
- [Best Approach To Cloud Security With Gary Dylina](https://www.scaletozero.com/episodes/best-approach-to-cloud-security-with-garry-dylina/): Gary Dylina, Narvar. Gary Dylina of Narvar on preparing for large-scale events, SOC2, IAM setup, and when to make a first security hire. Transcript: https://www.scaletozero.com/episodes/best-approach-to-cloud-security-with-garry-dylina.md
- [Bizzare Cloud Security Facts With Gaurav Batra](https://www.scaletozero.com/episodes/bizzare-cloud-security-facts-with-gaurav-batra-2/): Gaurav Batra, CyberFrat. Gaurav Batra, founder and CEO of CyberFrat, on surprising cloud security facts and building security awareness culture. Transcript: https://www.scaletozero.com/episodes/bizzare-cloud-security-facts-with-gaurav-batra-2.md
- [Cloud Security Made Simple With Swati Anuj Arya](https://www.scaletozero.com/episodes/cloud-security-made-simple-with-swati-anuj-arya-2/): Swati Anuj Arya, Amazon Pay. Swati Anuj Arya, CISO Office leader at Amazon Pay, on simplifying cloud security and responding to data breaches. Transcript: https://www.scaletozero.com/episodes/cloud-security-made-simple-with-swati-anuj-arya-2.md
- [Understanding Cyber Security With Aseem Rastogi](https://www.scaletozero.com/episodes/understanding-cyber-security-with-aseem-rastogi/): Aseem Rastogi, Meesho. Aseem Rastogi, Head of Cybersecurity and Compliance at Meesho, on building cybersecurity and compliance programmes from the ground up. Transcript: https://www.scaletozero.com/episodes/understanding-cyber-security-with-aseem-rastogi.md

## Topics

- [AI Security](https://www.scaletozero.com/topics/ai-security/): How security teams adopt AI safely, defend against AI-enabled attackers and secure the models, agents and data pipelines they build.
- [Application Security](https://www.scaletozero.com/topics/application-security/): Product security and AppSec in practice: threat modeling, secure SDLC, developer-friendly guardrails and closing the gaps tools leave behind.
- [Cloud Security](https://www.scaletozero.com/topics/cloud-security/): Securing AWS, Azure and GCP estates at scale: posture, architecture, guardrails and the operating model that keeps cloud risk in check.
- [GRC & Third-Party Risk](https://www.scaletozero.com/topics/grc-and-risk/): Governance, risk and compliance that enables the business — maturity models, third-party risk management and making audits a by-product.
- [Identity & Access Management](https://www.scaletozero.com/topics/identity-and-access/): Identity is the new perimeter. Least privilege, IAM anti-patterns, machine and AI-agent identities, and access that is granted just in time.
- [Security Leadership & Careers](https://www.scaletozero.com/topics/security-leadership/): Building security teams and careers: leadership, culture, hiring, skills for the next generation and making security an enabler.
- [Detection & Incident Response](https://www.scaletozero.com/topics/threat-detection-and-response/): Detecting and responding to real attacks — ransomware, SOC operations, incident response playbooks and the shift to detection and response.
- [Vulnerability Management](https://www.scaletozero.com/topics/vulnerability-management/): Finding and fixing what matters: prioritising by exploitability and business context rather than chasing every CVE the scanners report.

## Guests

- [Aakash Yadav](https://www.scaletozero.com/guests/aakash-yadav/)
- [Adam Shostack](https://www.scaletozero.com/guests/adam-shostack/)
- [Adam Smith](https://www.scaletozero.com/guests/adam-smith/)
- [Advait Patel](https://www.scaletozero.com/guests/advait-patel/): Senior SRE, Broadcom
- [Alma Paul](https://www.scaletozero.com/guests/alma-paul/): Senior Corporate Security Engineer, Faire
- [Alyssa Ahmann](https://www.scaletozero.com/guests/alyssa-ahmann/)
- [Amit Subhanje](https://www.scaletozero.com/guests/amit-subhanje/)
- [Ammar Ekbote](https://www.scaletozero.com/guests/ammar-ekbote/): Cloud Security Engineer, Pinterest
- [Andre Rall](https://www.scaletozero.com/guests/andre-rall/)
- [Anshuman Bhartiya](https://www.scaletozero.com/guests/anshuman-bhartiya/)
- [Apoorvaa Deshpande](https://www.scaletozero.com/guests/apoorvaa-deshpande/): Senior Privacy Engineer, Google Cloud
- [Ariel Shin](https://www.scaletozero.com/guests/ariel-shin/)
- [Aseem Rastogi](https://www.scaletozero.com/guests/aseem-rastogi/): Head of Cybersecurity and Compliance, Meesho
- [Aseem Shrey](https://www.scaletozero.com/guests/aseem-shrey/): Security Engineer, Rippling
- [Ashish Bhadouria](https://www.scaletozero.com/guests/ashish-bhadouria/): Domain Engineering Manager, Security & Privacy, IKEA
- [Ashish Garg](https://www.scaletozero.com/guests/ashish-garg/): Founder
- [Ashwin Patil](https://www.scaletozero.com/guests/ashwin-patil/)
- [Htet Naing Aung](https://www.scaletozero.com/guests/aung/): Cybersecurity Expert
- [Behnaz Karimi](https://www.scaletozero.com/guests/behnaz-karimi/): Cybersecurity Engineer & Independent Researcher, Tramarena
- [Bonnie Viteri](https://www.scaletozero.com/guests/bonnie-viteri/)
- [Brad Geesaman](https://www.scaletozero.com/guests/brad-geesaman/)
- [Brett Johnson](https://www.scaletozero.com/guests/brett-johnson/)
- [Brook Schoenfield](https://www.scaletozero.com/guests/brook-schoenfield/)
- [Chad Lorenc](https://www.scaletozero.com/guests/chad-lorenc/): Security Practice Manager, AWS Professional Services
- [Charles Mendoza](https://www.scaletozero.com/guests/charles-mendoza/)
- [Chris Hodson](https://www.scaletozero.com/guests/chris-hodson/): CSO, Cyberhaven
- [Chris Neggel](https://www.scaletozero.com/guests/chris-neggel/): Regional Chief Security Officer, Americas, Okta
- [Chris Romeo](https://www.scaletozero.com/guests/chris-romeo/)
- [Cassie Clark](https://www.scaletozero.com/guests/classie-clark/): Security Awareness Professional
- [Dakota Riley](https://www.scaletozero.com/guests/dakota-riley/)
- [Dinis Cruz](https://www.scaletozero.com/guests/dinis-cruz/)
- [Divyanshu Shukla](https://www.scaletozero.com/guests/divyanshu-shukla/)
- [Dustin Lehr](https://www.scaletozero.com/guests/dustin-lehr/)
- [Emily Zakkak](https://www.scaletozero.com/guests/emily-zakkak/): Cybersecurity Specialist, Senowit
- [Faraz Khan](https://www.scaletozero.com/guests/faraz-khan/)
- [François Proulx](https://www.scaletozero.com/guests/francois-proulx/): Senior Product Security Engineer, Boost Security
- [Garrett Smiley](https://www.scaletozero.com/guests/garrett-smiley/)
- [Gary Dylina](https://www.scaletozero.com/guests/gary-dylina/): Director of Security Engineering, Narvar
- [Gaurav Batra](https://www.scaletozero.com/guests/gaurav-batra/): Founder & CEO, CyberFrat
- [Gerard Johansen](https://www.scaletozero.com/guests/gerard-johansen/): Incident Response Professional
- [Giorgio Perticone](https://www.scaletozero.com/guests/giorgio-perticone/)
- [Gretchen Ruck](https://www.scaletozero.com/guests/gretchen-ruck/)
- [Hilal Ahmad](https://www.scaletozero.com/guests/hilal-ahmad/)
- [James Cash](https://www.scaletozero.com/guests/james-cash/)
- [Jan Hertsens](https://www.scaletozero.com/guests/jan-hertsens/): Senior Security Consultant, AWS
- [Jason Jordaan](https://www.scaletozero.com/guests/jason-jordaan/): Digital Forensics and Incident Response Professional
- [Jeevan Singh](https://www.scaletozero.com/guests/jeevan-singh/)
- [Jeffrey Wheatman](https://www.scaletozero.com/guests/jeffrey-wheatman/): Cyber Risk Evangelist, Black Kite
- [Jesse Miller](https://www.scaletozero.com/guests/jesse-miller/)
- [Jim Bugwadia](https://www.scaletozero.com/guests/jim-bugwadia/)
- [Jim Manico](https://www.scaletozero.com/guests/jim-manico/)
- [Jimmy Mesta](https://www.scaletozero.com/guests/jimmy-mesta/)
- [John Giglio](https://www.scaletozero.com/guests/john-giglio/)
- [Joseph Haske](https://www.scaletozero.com/guests/joseph-haske/)
- [Joseph South](https://www.scaletozero.com/guests/joseph-south/)
- [Josh Pyorre](https://www.scaletozero.com/guests/josh-pyorre/)
- [Kailash Havildar](https://www.scaletozero.com/guests/kailash-havildar/)
- [Kalyani Pawar](https://www.scaletozero.com/guests/kalyani-pawar/)
- [Karan Dwivedi](https://www.scaletozero.com/guests/karan-dwivedi/)
- [Kayra Otaner](https://www.scaletozero.com/guests/kayra-otaner/)
- [Kesten Broughton](https://www.scaletozero.com/guests/kesten-broughton/)
- [Kushagra Sharma](https://www.scaletozero.com/guests/kushagra-sharma/): Senior Platform Security Engineer, Booking.com
- [Kyle Fossum](https://www.scaletozero.com/guests/kyle-fossum/)
- [Lalit Khattar](https://www.scaletozero.com/guests/lalit-khattar/): Partner Solution Architect, AWS
- [Lalit Kumar](https://www.scaletozero.com/guests/lalit-kumar/)
- [Lily Chau](https://www.scaletozero.com/guests/lily-chau/)
- [Matt Tesauro](https://www.scaletozero.com/guests/matt-tesauro/): DevSecOps and AppSec Specialist
- [Matthew Marji](https://www.scaletozero.com/guests/matthew-marji/)
- [Matthew Moog](https://www.scaletozero.com/guests/matthew-moog/): Principal, Financial Services Risk Managed Services Leader, EY
- [Mauricio Duarte](https://www.scaletozero.com/guests/mauricio-duarte/)
- [Mel Reyes](https://www.scaletozero.com/guests/mel-reyes/)
- [Michele Chubirka](https://www.scaletozero.com/guests/michele-chubirka/): Cloud Security Advocate, Google
- [Nader Zaveri](https://www.scaletozero.com/guests/nader-zaveri/)
- [Nat Shere](https://www.scaletozero.com/guests/nat-shere/)
- [Dr. Natalia Semenova](https://www.scaletozero.com/guests/natalia-semenova/): Zero Trust Architect
- [Neelu Tripathy](https://www.scaletozero.com/guests/neelu-tripathy/): Senior Security Architect, Adobe
- [Nishant Modak](https://www.scaletozero.com/guests/nishant-modak/): Founder & CEO, Last9
- [Niyati Daftary](https://www.scaletozero.com/guests/niyati-daftary/)
- [Pablo Vidal](https://www.scaletozero.com/guests/pablo-vidal/)
- [Parul Khanna](https://www.scaletozero.com/guests/parul-khanna/): Senior Consultant, Information Risk Management
- [Patricia Titus](https://www.scaletozero.com/guests/patricia-titus/)
- [Paul Dyer](https://www.scaletozero.com/guests/paul-dyer/)
- [Perry Carpenter](https://www.scaletozero.com/guests/perry-carpenter/)
- [Priyanka Chatterjee](https://www.scaletozero.com/guests/priyanka-chatterjee/): CEO, London School of Cybersecurity
- [Ray Espinoza](https://www.scaletozero.com/guests/ray-espinoza/)
- [Reanna Schultz](https://www.scaletozero.com/guests/reanna-schultz/): Founder, CyberSpeak Labs
- [Rich Mogull](https://www.scaletozero.com/guests/rich-mogull/): VP of Product, DisruptOps
- [Richard Stiennon](https://www.scaletozero.com/guests/richard-stiennon/)
- [Rodrigo Montoro](https://www.scaletozero.com/guests/rodrigo-montoro/)
- [Ross Young](https://www.scaletozero.com/guests/ross-young/)
- [Rowan Udell](https://www.scaletozero.com/guests/rowan-udell/)
- [Sana Talwar](https://www.scaletozero.com/guests/sana-talwar/)
- [Sandeep Agarwal](https://www.scaletozero.com/guests/sandeep-agarwal/)
- [Scott Weston](https://www.scaletozero.com/guests/scott-weston/): Senior Consultant, NetSPI
- [Shivani Arni](https://www.scaletozero.com/guests/shivani-arni/): CISO, TransUnion CIBIL
- [Shweta Thapa](https://www.scaletozero.com/guests/shweta-thapa/): Security Specialist Solutions Architect, AWS
- [Ski](https://www.scaletozero.com/guests/ski/): Information Security Professional
- [Sneha Malshetti](https://www.scaletozero.com/guests/sneha-malshetti/): Senior Security Engineer, Ethos
- [Stephen Kuenzli](https://www.scaletozero.com/guests/stephen-kuenzli/)
- [Steve Giguere](https://www.scaletozero.com/guests/steve-giguere/)
- [Swati Anuj Arya](https://www.scaletozero.com/guests/swati-anuj/): Leader, CISO Office, Amazon Pay
- [Syed Shareef](https://www.scaletozero.com/guests/syeed-shareef/): Senior Security Engineer, AWS
- [Tom Adamski](https://www.scaletozero.com/guests/tom-adamski/)
- [Trupti Shiralkar](https://www.scaletozero.com/guests/trupti-shiralkar/)
- [Uttej Badwane](https://www.scaletozero.com/guests/uttej-badwane/): Senior Security Engineer, Carta
- [Vincent Romney](https://www.scaletozero.com/guests/vincent-romney/): Head of Global Security Architecture, Nu Skin Enterprises
- [Walter Haydock](https://www.scaletozero.com/guests/walter-haydock/)
- [Winthrop (Andy) Welch](https://www.scaletozero.com/guests/winthrop-welch/): Fractional CISO
- [Yotam Perkal](https://www.scaletozero.com/guests/yotam-perkal/)

## Optional

- [Questions answered](https://www.scaletozero.com/questions/): every question answered on the show, grouped by topic
- [About the show](https://www.scaletozero.com/about/)
- [Audio feed](https://anchor.fm/s/a745516c/podcast/rss)