All Podcasts
podcast
hosted by: Nabil Hannan

020 – What Makes a Successful Technologist, A Day in the Life of a Security Firm CISO, and Lessons from an Effective Phishing Engagement

Roshan Popal, SVP of Cloud Customer Operations & CISO at MicroStrategy
Share:

Episode Details

In this episode of Agent of Influence, Nabil sits down with Roshan Popal, SVP of Cloud Operations and CISO at MicroStrategy. They discuss Roshan’s start in security, which includes getting caught hacking the Internet Relay Chat (IRC) at SUNY Buffalo, and share advice for emerging security professionals. They also discuss what it’s really like to be a CISO at a security firm and reminisce about an effective phishing campaign that fooled Nabil when the two worked together and highlight the key business learnings from the engagement. Roshan discusses the challenges and opportunities of being a CISO at a security firm, business lessons learned from a phishing engagement, how to reduce security friction, and more.
A podcast hosted by:
Nabil Hannan
NetSPI Managing Director
Agent of Influence is a podcast hosted by NetSPI Managing Director Nabil Hannan, as a place to share best practices and trends in the world of cyber security and vulnerability management.
Need a Quote?
Common Questions
What is Penetration Testing as a Service (PTaaS)?

PTaaS is NetSPI’s delivery model for penetration testing. It enables customers to simplify the scoping of new engagements, view their testing results in real time, orchestrate faster remediation, perform always-on continuous testing, and more - all through the Resolve™ vulnerability management and orchestration platform. Learn More

Why should I use NetSPI?

We help organizations defend against adversaries by being the best at simulating real-world, sophisticated adversaries with the products, services, and training we provide. We know how attackers think and operate, allowing us to help our customers better defend against the threats they face daily.

How does NetSPI ensure quality results?

At NetSPI, we believe that there is simply no replacement for human-led manual deep dive testing. Our Resolve platform delivers automation to ensure our people spend time looking for the critical vulnerabilities that tools miss. We provide automated and manual testing of all aspects of an organization’s entire attack surface, including external and internal network, application, cloud, and physical security.

Our proven methodology ensures that the client experience and our findings aren’t only as good as the latest tester assigned to your project. That consistency gives our customers assurance that if vulnerabilities exist, we will find them.