Cybersecurity Mentors Podcast

Send us Fan Mail and we can reply directly! What carries over when a doctor changes careers into cybersecurity?For Dr. Samy Anand, clinical reasoning became a useful foundation for investigating security alerts. Building a cybersecurity career also meant learning technical fundamentals, making her work visible, and asking experienced people to teach her.Samy joins John to share how she landed her first SOC role during bootcamp, what helped her advance to senior analyst, and why repeated investigations—including false positives—are essential to developing judgment.We also explore how AI is changing SOC work and a question facing managers and new analysts alike: if automation handles more of the investigation, how will beginners get the practice they need.We wrap up with life beyond cybersecurity: Samy’s lifelong connection to Indian classical dance, how teaching keeps her connected to her culture, and her recent trek to Everest Base Camp—where progress meant putting one foot in front of the other.Connect with Samy:https://www.linkedin.com/in/samyuktha-a-33459097/Resources:National Cyber League: https://nationalcyberleague.org/competitionMetaCTF / SkillBit: https://skillbit.com/SANS newsletters: https://www.sans.org/newslettersCome hang out with us in the Cybersecurity Mentors Skool community. It’s free to join.

Send us Fan Mail and we can reply directly! Can you spend nearly two decades in one career and still successfully make the jump into cybersecurity?Chris Horner did exactly that.Before becoming a social engineer/penetration tester and vCISO, Chris spent nearly two decades working in banking. In this episode, he joins John to talk about how he made the transition into cybersecurity, what helped him land his first opportunity, and why the experience from your previous career doesn't disappear just because you're changing industries.Chris shares how networking became a "long-term job interview," why following up and showing people what you did with their advice matters, and what it was really like stepping into his first professional penetration-testing role.We also dig into Chris's specialty in social engineering, including how professional phishing campaigns are built, why understanding the client's business matters, and the story of a HIPAA-themed phishing test where more than 80 people submitted their credentials.We discuss:• Transitioning into cybersecurity later in your career• Building relationships instead of simply "networking"• Turning mentors and professional connections into long-term relationships• Developing the mindset of a penetration tester• What labs don't prepare you for in your first cybersecurity job• The importance of maintaining a beginner's mindset• How to evaluate the company interviewing you• Social engineering, phishing, and OSINT• Safe ways to develop social-engineering skills• Transferable skills from previous careers• Why communication and business knowledge matter in cybersecurityConnect with Chris:Chris Horner on LinkedInTriaxiom SecurityChris's article, "The vCISO: Security Leadership That Grows With Your Business": Read Chris's vCISO article Resources MentionedTCM Security Practical OSINT Research Professional (PORP): PORP CertificationBSides GreenvilleCome hang out with us in the Cybersecurity Mentors Skool community. It’s free to join.

Send us Fan Mail and we can reply directly! What separates great talent from a great résumé, and how can cybersecurity professionals make themselves impossible to ignore?In this episode of the Cybersecurity Mentors Podcast, John sits down with Mike Sarraille, retired Navy SEAL, leadership expert, Chief Talent Officer at OVERWATCH, and co-author of The Talent War.Mike shares lessons from Special Operations and high-performing organizations about how we can rethink hiring, identify potential, build stronger teams, and stand out in an increasingly competitive job market.We discuss:• Why experience alone doesn’t predict future performance• “Hire for character, train for skill”• The character attributes that predict high performance• Why likability and “culture fit” can lead to bad hires• How behavioral interviews, simulations, and case studies can reveal how candidates actually think• What hiring managers should look for in cybersecurity talent• Why hiring is only the beginning of developing great people• How candidates can demonstrate drive, curiosity, humility, and preparation• Why job seekers should interview the company too• How to make yourself impossible to ignore in a competitive job market• How AI is changing hiring and the workplace• Why Mike views AI as a force multiplierWhether you’re a cybersecurity leader building a team, a hiring manager looking for better ways to identify talent, or someone trying to break into cybersecurity, this conversation offers practical lessons for finding, developing, and demonstrating talent.Connect with Mike:Mike Sarraille on LinkedInhttps://www.linkedin.com/in/michaelsarrailleMike Sarraillehttps://mikesarraille.com/Resources MentionedOVERWATCH Mission Criticalhttps://weareoverwatch.com/The Talent War: How Special Operations and Great Organizations Win on Talenthttps://talentwargroup.com/the-talent-war/Talent War Grouphttps://talentwargroup.com/Come hang out with us in the Cybersecurity Mentors Skool community. It’s free to join.

Send us Fan Mail and we can reply directly! What does the future of cybersecurity look like, and how can the next generation prepare for it?In this episode of the Cybersecurity Mentors Podcast, John sits down with Cecilia Marinier of RSAC to talk about cybersecurity innovation, emerging technology, career opportunities, and developing the next generation of cybersecurity professionals.Cecilia shares her journey from studying political science and psychology and working in national security to helping lead RSAC’s Innovation and Scholars programs.We discuss:• Why cybersecurity needs people from many different backgrounds• Why networking and community are so important for breaking into cybersecurity• What makes a cybersecurity startup truly innovative• How AI is changing the cybersecurity market• RSAC Innovation Sandbox, Innovation Showcase, and Launch Pad• How startups can differentiate themselves in a crowded market• Why adaptability and the ability to pivot matter• The RSAC Security Scholars program and College Day• How students can gain experience and build relationships in cybersecurity• The impact mentors can have on someone’s career• How AI may change entry-level cybersecurity jobs• Why cybersecurity professionals should start learning and experimenting with AI now• Finding the cybersecurity career path that matches your interests and existing skills• Why the cybersecurity community is one of the industry’s greatest strengthsCecilia also shares a powerful story about John Strand of Black Hills Information Security offering training and mentorship to someone trying to break into cybersecurity, a great example of what this community can look like at its best.Connect with CeciliaCecilia Marinier on LinkedInhttps://www.linkedin.com/in/cecilia-murtagh-marinier-14967/Resources MentionedRSAC Security Scholarhttps://www.rsaconference.com/rsac-programs/security-scholarRSAC College Dayhttps://www.rsaconference.com/rsac-programs/college-dayRSAC Innovation Sandboxhttps://www.rsaconference.com/rsac-programs/innovation/innovation-sandboxRSAC Launch Padhttps://www.rsaconference.com/rsac-programs/innovation/launch-padRSAC Innovation Showcasehttps://www.rsaconference.com/rsac-programs/innovation/innovation-showcaseAppSec Village: Attacking AI – Modern Methodology to Test AI Systems with Jason Haddixhttps://www.rsaconference.com/Library/webcast/appsec-village-attacking-ai-modern-methodology-to-test-ai-systemsCybersecurity Career Guide by Alyssa Millerhttps://www.manning.com/books/cybersecurity-career-guideJohn Strand / Antisyphon Traininghttps://www.antisyphontraining.com/instructor/john-strand/Security BSideshttps://bsides.org/AFA CyberPatriothttps://www.uscyberpatriot.org/Come hang out with us in the Cybersecurity Mentors Skool community. It’s free to join.

Send us Fan Mail and we can reply directly! Learning cybersecurity does not mean figuring everything out on your own.In this episode of the Cybersecurity Mentors Podcast, Steve and John explain why following walkthroughs, tutorials, and expert examples is not cheating—it is one of the most effective ways to build practical cybersecurity skills.Just like musicians, athletes, artists, and apprentices, cybersecurity professionals improve by watching others, repeating proven techniques, and putting in the reps.We discuss how to move beyond simply copying instructions by asking why each step matters, predicting what comes next, researching what you do not understand, and documenting what you learn.We also share practical walkthrough resources for:• Offensive security and capture-the-flag challenges• SOC analysis and Splunk investigations• Digital forensics and incident response• Threat hunting• GRC and cybersecurity risk assessmentsYou do not need to create every project or lab from scratch. Follow someone who has already done it, learn the process, make it your own, and eventually help others do the same.Mimicry is not the opposite of mastery. It is often the first step toward it.Come hang out with us in the Cybersecurity Mentors Skool community. It’s free to join.

Send us Fan Mail and we can reply directly! The cybersecurity profession is changing faster than ever.In Part 2 of our breakdown of the 2026 ISSA Life and Times of Cybersecurity Professionals Report, we explore what 380 IT and cybersecurity professionals say about the biggest challenges facing the industry today.We discuss:• Why cybersecurity and IT must work together • Is the cybersecurity skills shortage real? • How organizations should build better talent pipelines • Why AI is a force multiplier—not a replacement • The evolving role of today's CISO • The leadership, business, and communication skills that matter mostWhether you're trying to break into cybersecurity, advance your career, or become a future security leader, this episode is packed with practical insights you can apply immediately.Come hang out with us in the Cybersecurity Mentors Skool community. It’s free to join.

Send us Fan Mail and we can reply directly! Is cybersecurity still a great career in 2026?In this episode of the Cybersecurity Mentors Podcast, we break down the latest 2026 ISSA Life and Times of Cybersecurity Professionals report and compare the research to our own experience leading enterprise cybersecurity teams.Based on feedback from 380 IT and cybersecurity professionals, we discuss:• The best advice for breaking into cybersecurity • Why networking matters more than certifications alone • The growing workload facing security teams • Stress, burnout, and why many professionals have considered leaving the field • The leadership and culture that separate great security teams from struggling onesIf you're trying to land your first cybersecurity job, grow into leadership, or understand what the career really looks like behind the scenes, this episode is for you.Come hang out with us in the Cybersecurity Mentors Skool community. It’s free to join.

Send us Fan Mail and we can reply directly! Everyone is asking the same question:"Will AI replace cybersecurity jobs?"After working with AI every day in a real enterprise security program, my answer may surprise you.In this episode, I explain why AI is actually creating more work for cybersecurity teams—not less.We discuss:Why vulnerability management is exploding How AI is accelerating vulnerability discovery Why AI governance is becoming one of the fastest-growing areas in cybersecurity How security operations (SOC) teams are actually using AI today Why AI is a force multiplier—not a replacement The cybersecurity skills that will become even more valuable over the next few years If you're worried about AI replacing your career—or you're trying to break into cybersecurity—this episode will help you understand where the real opportunities are.Come hang out with us in the Cybersecurity Mentors Skool community. It’s free to join.

Send us Fan Mail and we can reply directly! Trying to break into cybersecurity but not sure whether you should pursue a SOC Analyst role or a GRC (Governance, Risk, and Compliance) position?In this episode of The Cybersecurity Mentors Podcast, we break down the differences between SOC and GRC careers, the skills needed for each path, and how to determine which one fits your strengths, interests, and long-term goals.Whether you're a career changer, recent graduate, IT professional, or someone trying to land your first cybersecurity job, this episode will help you make a more informed decision about your future.Tell us in the comments:If you had to choose today, would you pick SOC or GRC, and why?Come hang out with us in the Cybersecurity Mentors Skool community. It’s free to join.

Send us Fan Mail and we can reply directly! Too many people are getting bad advice about cybersecurity careers, and it’s hurting their chances of getting hired.In this episode of The Cybersecurity Mentors Podcast, we break down some of the biggest myths in cybersecurity today, including:• “Cybersecurity is entry-level” • “AI is replacing SOC analysts” • “You need to know everything before applying” • “Cybersecurity pays six figures immediately” • “Technical skills are all that matter” • “LinkedIn networking is pointless” • “Cybersecurity influencers give realistic advice”If you're trying to break into cybersecurity or grow your career, this episode will help you focus on what truly matters.Come hang out with us in the Cybersecurity Mentors Skool community. It’s free to join.