SecOps Confidential
Claim This Podcastby Exaforce
Podcast Overview
<p>Behind every security program are the unseen stories of chaos, resilience, and reinvention. SecOps Confidential brings those stories to light through candid conversations with security leaders, CTOs, and practitioners who have built, scaled, and rebuilt their SOCs from the ground up.</p>
Language
🇺🇲
Publishing Since
12/10/2025
Reach the team behind SecOps Confidential
Verified contact details for this show aren't on file yet — sign up to get notified when they land.
Recent Episodes
May 26, 2026
Why most teams are flying blind in security operations with Bleon Proko
<p>In this episode of SecOps Confidential, James Berthoty talks with Bleon Proko, cloud security researcher at Exaforce, about why cloud security operations are still tripping up teams that are otherwise solid at traditional SOC work. Bleon breaks down the structural gap between cloud security engineers focused on posture and SOC teams drowning in raw log sources they don't know what to do with. They get into which log sources matter most (including S3 data events and Bedrock logs that most people skip), how to approach basic detection building without getting buried in false positives, and how attackers tend to stay basic while defenders often miss things hiding in plain sight. Bleon also shares lessons from his own cloud research, including a real honeypot that caught a full threat actor team, and his framework for building detection coverage you can actually maintain.</p>
March 17, 2026
Building security operations from scratch and when MDR makes sense with Raghuraman Sethuraman
<p>Most security conversations happen on the security side of the org chart. Raghuraman Sethuraman, VP of Engineering at Automation Anywhere, has been in the room from the engineering side, and the view is different.</p><p>In this episode, Raghu joins host James Berthoty to talk about how one of the world's leading AI automation platforms thinks about security from the inside: how product security, infrastructure security, and IT InfoSec operate as separate functions but stay tightly coordinated; why AI-generated code from coding assistants is creating threat vectors traditional security processes weren't built to catch; and how to break AI security into three distinct areas, coding assistant security, prompt injection and system prompt security, and runtime monitoring.</p><p>They also get into what the explosion of internal agents actually means for security teams: every department will have its own agents, each needing access to specific data, each requiring identity controls and secure communication protocols. And why the organizations that aren't thinking about agentic security frameworks today will be the ones caught scrambling when adoption hits.</p><p>Raghu's advice for security leaders: governance cannot be an afterthought, and one to 100 happens very fast.</p>
February 17, 2026
Building security-first crypto infra and the CTO-CISO partnership with Srijan Shetty
<p>In this episode of SecOps Confidential, host James Berthoty talks with Srijan Shetty, co-founder and CTO at Fuse, about building security into crypto and fintech infrastructure. Srijan explains why Zero Trust and least privilege access are easier to scale than bolting security onto legacy systems later. They dig into how AI tools speed up both development and security ops, why comprehensive test suites let teams ship fast while meeting regulatory requirements, and what it actually looks like to run 99% unit test coverage on a million-line codebase. Srijan shares what's working with AI SOC platforms, DAST scanning, and LLM-assisted development, and explains how security becomes an advantage when you tie it to developer experience and deployment speed.</p><p>In this episode</p><ul><li>The shift from security as a blocker to security as a business enabler in CTO-CISO partnerships</li><li>Why building on Zero Trust and least privilege from day one beats retrofitting security later</li><li>How progressive regulators like the UAE's VARA can enable rather than block security innovation</li><li>The strategic use of AI across infrastructure, CI/CD pipeline, and developer experience layers</li><li>Why AI SOC platforms reduce alert fatigue and improve investigation speed for lean security teams</li><li>Balancing developer velocity with security through comprehensive testing infrastructure</li><li>How 99% unit test coverage and end-to-end regression suites enable confident, frequent deployments</li></ul><p>Links</p><ul><li><a target="_blank" rel="noopener noreferrer nofollow" href="https://fuze.finance/">Fuze</a></li><li><a target="_blank" rel="noopener noreferrer nofollow" href="https://www.exaforce.com/">Exaforce</a></li></ul>
5 total episodes available
Deep-dive analytics for SecOps Confidential
Frequently asked questions
Have a different question and can't find the answer you're looking for? Reach out to our support team by sending us an email and we'll get back to you as soon as we can.
- What is SecOps Confidential?
<p>Behind every security program are the unseen stories of chaos, resilience, and reinvention. SecOps Confidential brings those stories to light through candid conversations with security leaders, CTOs, and practitioners who have built, scaled, and rebuilt their SOCs from the ground up.</p> - How often does this podcast release new episodes?
This podcast updates daily.
- Where can I listen to this podcast?
This podcast is available on 4 platforms including Apple Podcasts, Spotify, and more. You can also use the RSS feed directly.
- Does this podcast accept guests?
Yes, this podcast regularly features guests.
Legal Disclaimer
Pod Engine is not affiliated with, endorsed by, or officially connected with any of the podcasts displayed on this platform. We operate independently as a podcast discovery and analytics service.
All podcast artwork, thumbnails, and content displayed on this page are the property of their respective owners and are protected by applicable copyright laws. This includes, but is not limited to, podcast cover art, episode artwork, show descriptions, episode titles, transcripts, audio snippets, and any other content originating from the podcast creators or their licensors.
We display this content under fair use principles and/or implied license for the purpose of podcast discovery, information, and commentary. We make no claim of ownership over any podcast content, artwork, or related materials shown on this platform. All trademarks, service marks, and trade names are the property of their respective owners.
While we strive to ensure all content usage is properly authorized, if you are a rights holder and believe your content is being used inappropriately or without proper authorization, please contact us immediately at hey@podengine.ai for prompt review and appropriate action, which may include content removal or proper attribution.
By accessing and using this platform, you acknowledge and agree to respect all applicable copyright laws and intellectual property rights of content owners. Any unauthorized reproduction, distribution, or commercial use of the content displayed on this platform is strictly prohibited.