Kevin Qiu, Staff Security Engineer at Shiftsmart and their first security hire, breaks down the realities of building security programs from scratch. In this episode, he discusses the risk that comes with using work devices for personal purposes, why everyone wins when companies get paid AI tools and why the industry's obsession with hiring only senior talent is creating a dangerous skills gap.0:00 How Kevin entered the field from a stint in consulting8:13 What no one tells you about being the first security hire at a startup18:28 The first thing security leads should do starting a security program22:24 Security in B2B2C companies27:53 Browser-based threats and on using work devices for personal matters37:08 Startups are already solving tomorrow’s cyber threats41:59 During incidents, keep the initial response team small44:10 Why refusing to hire juniors will lead to another COBOL quagmire🔔 Follow Kevin and Aleksandra on:https://www.linkedin.com/in/kevinmqiu/https://www.linkedin.com/in/aleksandra-melnikova-1012/🔥 Powered by SquareXDeployed as a lightweight extension, SquareX turns any browser, on any device, into a secure enterprise browser. Find out more about SquareX at https://hubs.la/Q03rPcbf0

Ask this episode

“What did the council decide on item 42?” — answered with the speaker and the moment.

Transcript

Related