Today on the Social-Engineer Podcast: The Security Awareness Series, Ryan and I are joined by Jason Rebholz. Jason is the Chief Information Security Officer at Corvus Insurance. He has over a decade of experience performing forensic investigations into sophisticated cyber attacks and helping organizations build secure and resilient environments. As Corvus’s CISO, Jason leverages his incident response, security, and infrastructure expertise to drive security strategy and reduce the risk of security threats internally at Corvus and for Corvus's policyholders. Prior to joining Corvus, Jason held leadership roles at Mandiant, The Crypsis Group, Gigamon, and MOXFIVE [June 19, 2023]
00:00 - Intro
01:03 - Intro Links:
- Social-Engineer.com - http://www.social-engineer.com/
- Managed Voice Phishing - https://www.social-engineer.com/services/vishing-service/
- Managed Email Phishing - https://www.social-engineer.com/services/se-phishing-service/
- Adversarial Simulations - https://www.social-engineer.com/services/social-engineering-penetration-test/
- Social-Engineer channel on SLACK - https://social-engineering-hq.slack.com/ssb
- CLUTCH - http://www.pro-rock.com/
- innocentlivesfoundation.org - http://www.innocentlivesfoundation.org/
05:04 - Jason Rebholz Intro
05:47 - How did you get to where you are?
11:32 - Eating the Elephant
12:53 - The Gospel of Ryan
15:39 - Back to Basics
16:49 - Finding the Right Alleyway
20:32 - You're Allowed to Change Your Mind
23:14 - The Right Tools for the Job
24:58 - Maximizing ROI
25:54 - The City of No
27:11 - What's Bad MFA?
29:41 - 3-2-1...1
32:52 - Quality Fishing
36:32 - Holistic Security Program
39:07 - Realistic Expectations
41:31 - Mentors
42:58 - Book Recommendations
- Atomic Habits – James Clear
45:16 - Wrap Up
- LinkedIn: www.linkedin.com/in/jrebholz/
- Youtube: www.youtube.com/@teachmecyber
- Website: www.corvusinsurance.com/
46:07 - Outro