A look at the common frameworks and standards that shape Information Security programs. — Five years ago I was a junior, going on senior, in college, and had just landed my first job in the tech field. …

SecOps, Incident Response, Vulnerability Management, Risk Analysis…where do I start? — The information security industry is very large and there are many different career paths to be considered. Googling “jobs in information security” likely results in something like this:

Reflecting on the CISSP exam and the excitement two years later when I officially became certified. — I took the CISSP exam back in November of 2019, so you can say it’s been quite a long journey. …

An analysis of the gender gap in cybersecurity and tech careers alike. — The fact that there are so few women in the cybersecurity industry isn’t news to anyone. This has been an issue for years and years but has become more of a popular topic in parallel with the rise in popularity of the profession. One would think that as cybersecurity becomes…

Intro to Static and Dynamic Application Security Testing — This article was originally published on Built In. What is Application Security Testing? Web-hosted applications have become commonplace in the digital era. We interact with web applications multiple times each day as we go about our normal routines, whether we’re doing so via online banking, checking the status of a shipment, or browsing products on…

Black Hat USA 2022 was a two-day conference jam-packed with content. Here are 4 briefings I found most engaging and interesting. — Another year, another Black Hat conference in the books. This year I attended my third Black Hat conference and the second one virtually from my home office. …

An introduction to hashing and some common use cases in technology. — This article was originally published on Built In. If you work in the technology or cybersecurity industry, chances are you’ve heard of the term hashing, but what is it and what is it used for? …

Strategies to help you continuously reduce alerts, identify opportunities for improvement, and avoid alert fatigue. — This article was originally published on Built In. In the last decade, security tools and programs across the globe have made immense strides in their ability to detect, prevent, and respond to advanced security threats. …

How can companies use threat intelligence and the ATT&CK framework to make their security programs more effective? — I recently obtained my Master’s Degree in Cybersecurity and, to do so, had to complete a capstone project. …