Skip to content
Sign in
Artwork for Cyber Security District
BusinessCareersTechnologyNewsTech News

Cyber Security District

Cyber Security District

The interview podcast for cyber security professionals and for those who aspire to become one. We interview industry experts to get to know the latest trends, real life war stories and everything you need to know about this exciting industry.

Play
Open in
  • 21 episodes
  • fortnightly
  • Avg 50 min
  • English

Episodes 21

NewestOldestLongest
All20Unplayed20In progress0Played0
Counted on this page — what you have heard stays on this device, so it is not something the list can be paged by.
  • S7 · E53
    Tuesday · 47 min

    The Rise of Identity-Based Attacks with Olivier Eyries | Saporo

    The Rise of Identity-Based Attacks with Olivier Eyries | Saporo What if you could see your entire attack surface the way a hacker does and fix it before they strike? In this episode, hosts Laurens Jagt sit down with Olivier Eyries, co-founder and CEO of Saporo, one of Switzerland's fastest-growing cybersecurity startups. Saporo helps organisations stop hackers by identifying and eliminating identity risks before attackers can exploit them. Olivier is a serial entrepreneur with two previous ventures under his belt, including one sold to Proofpoint in 2021. He and his co-founders built what he calls a "Google Maps for cybersecurity": a graph-based platform that maps every attack path, every permission, and every identity risk across an organisation's environment. In this conversation, he breaks down why identity-based attacks have exploded, what AI agents mean for the attack surface, and why fixing one permission can block millions of potential attack paths. In this episode: Olivier's journey: from dropping out at 21 to two exits and founding Saporo Why identity-based attacks have exploded and AI is accelerating the trend The graph-based approach: visualising attack paths the way hackers do Non-human identities: why AI agents are the next major attack surface How cutting one permission can block millions of attack paths Saporo's 98% renewal rate and €7M funding round The European funding gap and why Olivier is expanding into the US Timestamps: 00:00 Introduction 01:03 Olivier's entrepreneurial journey: from dropout to two exits 04:12 The founding of Saporo: right tech, right team, right time 05:33 The Google Maps for cybersecurity concept 09:09 €7M raised and building through three stages of startup growth 11:02 Graph-based approach to identity risk and attack paths 16:14 How Saporo prioritises which attack paths to cut first 22:32 AI's impact on cybersecurity and Saporo's product roadmap 23:43 Non-human identities: the next major attack surface 29:19 What CISOs need to do right now about AI agents 34:17 Saporo's next milestones: US expansion and customer success 37:26 The European funding gap and why it matters for founders 43:49 Signal message to CISOs: give European founders a shot 44:42 Final thoughts: stay humble, ask the question, build now Connect with the guests: Olivier Eyries: https://www.linkedin.com/in/olivier-eyries/ Website: https://www.saporo.io/ Follow Cyber Security District: Laurens Jagt on LinkedIn: https://www.linkedin.com/in/laurensjagt/ Jeroen Prinse on LinkedIn: https://www.linkedin.com/in/jprinse/ Website: https://www.cybersecuritydistrict.com/ All channels & newsletter: https://beacons.ai/cybersecuritydistrict

  • S7 · E52
    July 17 · 31 min

    You Can’t Patch Your Way Out of This | Mahdi Abdulrazak & Kim van Lavieren, Dawnguard | Cyber Security District

    What if your infrastructure was built secure from minute one and stayed that way? In this special one year anniversary episode of Cyber Security District, host Jeroen Prinse sits back down with Mahdi Abdulrazak (CEO) and Kim van Lavieren (CTO) of Dawnguard, a security automation platform that turns approved security architecture directly into deployable cloud infrastructure as code. One year in, having just closed a pre-seed round and raised €6.3 million in total funding and opening a new office in New York, Dawnguard is making a bold bet: that the only real answer to modern cyber threats isn't better detection or faster patching, it's building systems that are resilient by design from the very start. Mahdi and Kim have both led security teams inside large organisations and lived through the same recurring nightmare: architecture locked in too early, security reviews arriving too late and a list of 50 findings that nobody has time to fix before the product ships. Dawnguard was built to break that cycle, with a collaborative canvas that lets teams design, validate and deploy secure infrastructure in minutes, with continuous drift detection to make sure it stays that way. One year on, we look back at how far that idea has come and what's next as the company expands. Key Takeaways: You cannot patch your way out of agentic AI attacks, the only answer is building more resilient systems from the start The hardest translation in security is from policy to architecture, ambiguity and contradictions there cascade into every layer below Context is the missing ingredient in most security tooling: secure or insecure is a binary lens that doesn’t reflect reality Drift detection only works when you know what was approved in the first place, that’s the advantage of integrating into the design lifecycle Security decisions still belong to the business and engineers, Dawnguard removes the friction, not the ownership The shift from protection to resilience is already happening: it’s not if you get breached, it’s how contained the blast radius is European founders can compete, but capital conviction from investors matters as much as capital volume Timestamps: 00:00 – Introduction 00:15 – Meet Dawnguard 00:48 – One year in: what proved Dawnguard was solving a real problem 01:30 – How customers are using the platform today: discover, design, deploy, monitor 03:20 – The shift-left moment: when architecture gets locked in and it’s already too late 05:15 – why organisations overestimate their resiliency requirements 06:15 – What Snyk, OPA and Sentinel leave unresolved 08:30 – Guardrails vs. findings: preventing vulnerabilities instead of just reporting them 09:30 – Policy to architecture to code to production: where is the hardest translation? 11:00 – The Mythos era: agentic AI and why patching is a losing strategy 12:50 – The shift from protection to resilience 15:00 – Blast radius reduction and the holistic trade-off view Dawnguard provides 16:45 – Drift detection: how Dawnguard tells a legitimate change from a malicious one 18:20 – Prompting redesigns for cost, sustainability, and resilience 20:00 – Bringing guardrails into the developer IDE in real time 22:25 – Who owns the security decision? 25:45 – European digital sovereignty: what it concretely means for Dawnguard 27:55 – Raising €6.3 million from European funds in year one 29:10 – What excites Mahdi and Kim most about the road ahead 30:40 – Final message: what CISOs should be doing differently a year from now Connect with the guests: Mahdi Abdulrazak: https://www.linkedin.com/in/mahdiabdulrazak/ Kim van Lavieren: https://www.linkedin.com/in/kim-v-0645931b4/ Website: https://www.dawnguard.io/ Follow Cyber Security District: Jeroen Prinse on LinkedIn: https://www.linkedin.com/in/jprinse/ Laurens Jagt on LinkedIn: https://www.linkedin.com/in/laurensjagt/ Website: https://www.cybersecuritydistrict.com/ All channels & newsletter: https://beacons.ai/cybersecuritydistrict

  • S6 · E51
    June 16 · 54 min

    From Ethical Hacker to Serial Founder | Francisco Nina Rente | Cyber Security District Podcast

    What does it take to build a cybersecurity company not once, but twice from the ground up? In this episode of Cyber Security District, we sit down with Francisco Nina Rente, one of Portugal's most accomplished cybersecurity entrepreneurs. Francisco started his journey as a teenager tinkering with computers and quickly found his way into ethical hacking and open-source security communities. That curiosity became a career, which then led to a company. His first venture grew from a university incubator into a 250-person operation delivering services across 22 countries, before being acquired by a global security group. After years scaling that business from the inside and taking on roles as country manager, CTO and board member, Francisco stepped away to build again. This time, the mission is clearer: help organisations stop just detecting threats and start truly recovering from them. Art Resilia was born out of a conviction that the market was shifting from cybersecurity to cyber resilience, and Francisco positioned the company right at the centre of that shift. Key Takeaways: Cyber resilience is about recovery, not just defence Focus beats opportunity-chasing, especially in the early days of a startup The Commonwealth of a team always comes before individual interest Trust-based security communication outlasts fear-based selling every time Knowledge remains the core differentiator, even in the age of AI Timestamps: 00:00 – Introduction 01:20 – From a family computer to a hacker mindset 04:00 – First paid gig: penetration testing for hardware 05:30 – Building Portugal's first incident response team at university 09:00 – Selling trust, not fear: early media and awareness work 11:00 – Scaling to 22 countries and finding the right investors 15:30 – The acquisition: joining a global security group 20:00 – Growing into CTO and leaving on his own terms 22:00 – The idea behind Art Resilia and reading the market shift 24:30 – The name: "The Art of Resilience" 25:00 – Where Art Resilia stands today: 50 people, 4 countries 27:00 – Why the Netherlands and Benelux? 28:00 – Lessons from 20 years of building: focus, people, pragmatism 33:00 – Culture, remote work, and hiring for values first 40:00 – What's next for Art Resilia in 3–5 years 43:00 – AI in cybersecurity: tool or transformation? 45:30 – Advice for young professionals entering the field 52:00 – Final message to CISOs: protect both business confidentiality and individual privacy Connect with the guest: Francisco Nina Rente: https://www.linkedin.com/in/frente/ Website: https://www.artresilia.com Follow Cyber Security District: Laurens Jagt on LinkedIn: https://www.linkedin.com/in/laurensjagt/ Website: https://www.cybersecuritydistrict.com/ All channels & newsletter: https://beacons.ai/cybersecuritydistrict

  • S6 · E50
    May 26 · 48 min

    Automating the Boring Parts of Cybersecurity Consulting | Leslie Clement & Erie Berhitu, Clember AI | Cyber Security District

    What if you could clone your best cybersecurity consultant and put them to work on five engagements at once? In this episode of Cyber Security District, we sit down with Leslie Clement and Erie Berhitu, co-founders of Clember AI, an EU-first, AI-native platform built to automate the repetitive, time-consuming work that holds cybersecurity consultants back. Both Leslie and Erie spent years grinding through the same manual loops at major consultancy firms document analysis, gap assessments, risk reports, roadmaps before deciding enough was enough. Rather than build another consulting firm or hire more headcount, they built a platform. Clember AI now enables security consultants to run five or more client engagements simultaneously, with consistent, high-quality output every time. And they did it entirely bootstrapped, no VC, no investor pressure, just product-market fit and a clear-eyed vision of where cybersecurity consulting is heading. In this episode, we explore: How a company getting hacked on day one of the job launched Leslie’s career in cybersecurity The year-long frustration that led Erie and Leslie to build Clember AI instead of another consulting firm Why they chose to stay bootstrapped despite investor interest and why they don’t regret it How Clember AI automates the full consulting lifecycle: document ingestion, gap analysis, risk translation, and reporting Why consistency across junior and senior consultants is a bigger deal than most firms admit The shift from hourly billing to monthly retainers and how Clember keeps consulting firms “interesting” to clients year three and beyond Their vision: becoming the Datasnipper of cybersecurity consulting Why embracing AI is non-negotiable for CISOs and why helping early-stage startups matters for the whole industry Timestamps: 00:00 – Introduction 00:15 – Meet Leslie Clement and Erie Berhitu 01:40 – How Erie got into cybersecurity (and why it wasn’t exactly planned) 02:45 – Leslie’s rough first day: getting hacked with no tech team 04:00 – The shared frustration that sparked Clember AI 06:10 – Why they chose to build a tech firm instead of a consulting firm 08:30 – The first product concept: automating the questionnaire 11:20 – Who Clember AI is actually for: cybersecurity consultancy firms 14:00 – Billable hours vs. scale: how Clember changes the math 17:30 – The shift from hourly billing to monthly retainers and staying interesting in year three 22:00 – Will AI kill traditional consultancy? Leslie and Erie’s take 25:10 – How Clember works: document ingestion, gap analysis, risk translation, roadmaps 29:00 – Consistency across consultant seniority levels 31:30 – Hiring technical talent as non-technical founders 34:00 – Staying bootstrapped despite VC interest and why pivoting was easier without investor pressure 38:30 – What made Clember appealing at an early stage 41:00 – The hiccups: work-life balance, family, and knowing when to step away 44:30 – Gut feeling vs. rational decision-making as founders 48:00 – The vision: Clember as the Datasnipper for cybersecurity consulting 51:30 – What’s next: new markets, sales hires, and scaling customer success 54:00 – Data privacy and security by design inside Clember 57:00 – Final message to CISOs: embrace innovation, and back the startups Connect with the guests: Leslie Clement: https://www.linkedin.com/in/leslie-clement/ Erie Berhitu: https://www.linkedin.com/in/eberhitu/ Website: https://www.clember.ai/ Follow Cyber Security District: Laurens Jagt on LinkedIn: https://www.linkedin.com/in/laurensjagt/ Website: https://www.cybersecuritydistrict.com/ All channels & newsletter: https://beacons.ai/cybersecuritydistrict

  • S6 · E49
    May 12 · 45 min

    How Hackers Bypass MFA: The Rise of Infostealers with Tom Leijte, Founder of Passguard

    In this episode of Cyber Security District, we speak with Tom Leijte, founder of Passguard, one of the most exciting emerging cybersecurity companies in the Netherlands. Passguard helps organizations detect when infected devices, stolen credentials, and active sessions show up on criminal marketplaces, giving security teams early visibility before exposure turns into a breach. Tom shares how his journey started outside of “traditional” cybersecurity, working in private investigations where dark web intelligence was already part of high-stakes screening work. Together with his technical co-founder, he built the capabilities to infiltrate closed criminal forums and surface the kind of forensic-level logs most companies never see until it’s too late. In this episode, we cover: Using dark web intelligence for sensitive employee screening Why “classic” dark web monitoring often gets deprioritized by security teams The infostealer shift: stolen session tokens, not just leaked passwords How session theft can bypass MFA and why that changes the game How criminal marketplaces work (and how trust is built among criminals) How Passguard infiltrates closed forums using reputation, escrow, and long-term access Building a European-first solution and partnering with MSSPs / security platforms Scaling after investment: team growth, ICP clarity, and market expansion Timestamps: 00:00 – Intro 00:15 – Meet Tom Leijte and Passguard’s mission 00:37 – Early visibility: exposure before it becomes a breach 01:22 – Tom’s background in private investigations 02:13 – Screening sensitive roles using open-source + dark web sources 03:47 – Why dark web intelligence matters for organizations 04:39 – How Passguard started (and the co-founder story) 05:53 – What surprised Tom most about the dark web 06:20 – Data breaches vs data brokers: what ends up for sale 07:20 – Discovering infostealers and why they’re different 08:17 – Session tokens, MFA bypass, and the “unmanaged endpoint” problem 10:01 – What infostealers capture (sessions, access, and more) 11:10 – Why SaaS + remote work + BYOD changed attacker economics 12:27 – Supplier and branch-office risk: the blind spot organizations miss 14:31 – Why classic “dark web monitoring” wasn’t landing in the market 15:38 – The Mom Test and learning to run real customer conversations 18:08 – Reframing the problem: focusing on infostealer exposure 20:38 – How the dark web works (no “bookmark”, reputation, escrow) 23:11 – Passguard’s approach: bots, reputation, and long-term infiltration 25:55 – Real-world example: infostealers and large-scale government breaches 27:37 – What stolen access is worth and how it gets packaged for sale 29:19 – Screenshots, persistence, and “always up-to-date” stolen sessions 30:05 – Educating customers and turning awareness into action 31:03 – What Passguard delivers: evidence, context, and early alerts 33:08 – The Snowflake case: old credentials, massive impact 36:06 – Scaling after investment: pressure, growth, and coping 37:18 – Why Tom chose experienced cyber investors and operators 39:43 – Passguard as intelligence inside MSP/MSSP security workflows 41:45 – Team expansion and what roles matter most next 43:27 – ICP clarity and European market expansion 45:27 – Signal message to CISOs: give startups a chance early 46:50 – Outro Connect with the guests: Tom Leijte: https://www.linkedin.com/in/tom-leijte-01596536/ Website: https://www.passguard.com/ Follow Cybersecurity District: Laurens Jagt on LinkedIn: https://www.linkedin.com/in/laurensjagt/ Website: https://www.cybersecuritydistrict.com/ All channels & newsletter: https://beacons.ai/cybersecuritydistrict

  • S6 · E48
    April 28 · 53 min

    Building Human Resilience for Deepfake-Driven Phishing | Julius Muth | Cyber Security District Podcast

    In this episode of Cyber Security District, we sit down with Julius Muth, co-founder of Revel8, a fast-growing startup tackling one of the most urgent threats in modern cybersecurity: deepfake-powered social engineering. Julius flew in from Berlin to join us in the Amsterdam studio and breaks down how attackers are already cloning voices, abusing call centers, and using multi-channel manipulation (email, WhatsApp, LinkedIn, video calls) to bypass technical defenses and target employees at scale. We also get into how Revel8 scaled from early MVPs to large enterprise rollouts, the team’s operator DNA from Celonis, and their goal to build “10 million human firewalls.” In this episode, we dive into: Why deepfake voice phishing is exploding via service desks and call centers The real-world deepfake fraud case that changed everything (25M USD) How Revel8 personalizes awareness with role-based “playlist” simulations Why time-to-first-report beats click rate as a security KPI How Revel8 scaled fast: funding, enterprise rollouts, and culture Key Takeaways: Deepfakes turn trust signals (voice, video) into attack surfaces Context-rich phishing is far more effective than generic campaigns Awareness works best in short, relevant, continuous moments Measure reporting behavior and speed, not “gotcha” click rates Modern threats require modern training across every channel Timestamps: 00:00 – Introduction 00:15 – Meet Julius Muth and Revel8’s mission 01:20 – Why deepfakes are a serious enterprise risk 02:30 – Voice phishing through service desks and call centers 04:00 – A real incident example and why it’s “hot” right now 04:45 – Founders’ background and the Celonis operator mindset 05:40 – Validating the market (100 handwritten letters) 07:10 – The deepfake fraud case: 25M USD and what it proved 09:20 – Social engineering is leveling up (multi-channel trust) 12:00 – The “podcast vote” scam and impersonation patterns 14:20 – From MVPs to enterprise: what changed after hiring a senior CTO 19:00 – Why traditional awareness training fails 23:40 – The “Spotify playlist” model: personalized learning journeys 26:00 – Turning real attacks into simulations 28:40 – Better KPIs: time-to-first-report and workforce sensors 31:10 – Modern payloads and “make the victim execute” tactics 34:40 – Scaling growth: team, cold-calling “Champions League,” and GTM 41:40 – Advisors, credibility, and enterprise access 45:00 – The goal of “10 million human firewalls” 46:10 – Why the name Revel8 (and the naming story) 48:40 – Hiring profile and what they look for 51:40 – Munich office move and what’s next 52:35 – Final message to CISOs Connect with the guest: Julius Muth: https://www.linkedin.com/in/julius-muth/ Revel8: https://www.revel8.ai/ Follow Cyber Security District: Laurens Jagt on LinkedIn: https://www.linkedin.com/in/laurensjagt/ Website: https://www.cybersecuritydistrict.com/ All channels & newsletter: https://beacons.ai/cybersecuritydistrict

  • S6 · E47
    April 14 · 58 min

    Securing the World´s biggest HR Firm | Martijn Nykerk, CISO at Randstad | Cyber Security District

    Title: Securing the World´s biggest HR Firm | Martijn Nykerk, CISO at Randstad | Cyber Security District Episode Description: What does it take to secure a company that manages the careers of millions of people across the globe? In this episode of Cyber Security District, we sit down with Martijn Nykerk, CISO at Randstad, one of the world’s largest HR and recruitment firms, with over 6,000 branches across 38 countries. Martijn has spent 20 years inside Randstad, growing from running the Dutch telco infrastructure to becoming its first global CISO, building security from the ground up as the company transformed from a federation of local operators into a true multinational. With an engineering background forged on North Sea gas platforms, Martijn brings a rare perspective to the CISO role: the ability to zoom in and out across technical, process, organizational, and business layers simultaneously. In this conversation, he breaks down what that actually looks like in practice, why social skills matter more than most security professionals think and how to build a security function that people want to work with. In this episode, we explore: How Martijn’s career started on a North Sea gas production platform and why safety systems are the original cybersecurity What it took to build Randstad’s first global security function from scratch The CISO dilemma: centralize or embed? How to build a security team people actually want to engage with Managing vulnerability backlogs, budget battles, and the patching problem The real-world incident that moved cybersecurity from priority 43 to priority 1 overnight How AI is lowering the barrier for attackers including 16-year-olds running perfect phishing campaigns Why CISO community-building and information sharing matter more than ever Timestamps: (00:00) – Introduction (01:15) – Starting on a North Sea gas platform (05:30) – Joining Randstad and running the Dutch telco infrastructure (09:00) – Becoming Randstad’s first global CISO (14:20) – The “zoom in and zoom out” CISO mindset (19:45) – What would surprise someone shadowing a CISO for a week (24:10) – Compliance-heavy vs. risk-driven CISO profiles (28:30) – Embed vs. centralize: the security team structure debate (33:00) – How to make security a team people want (37:15) – Patching, vulnerability backlogs, and the budget war (42:30) – Building a security narrative that lands with leadership (46:00) – The incident that changed everything: data breach and crisis response (53:20) – What makes a great security professional (hint: it’s social skills) (58:00) – The CISO hiring interview: starting with “What questions do you have for me?” (01:02:10) – Community building and the 80% overlap problem (01:07:30) – AI as an attacker accelerant (01:12:00) – Final message to CISOs: trust each other and share more Connect with the guest: Martijn Nykerk: https://www.linkedin.com/in/martijnnykerk/ Follow Cyber Security District: Laurens Jagt on LinkedIn: https://www.linkedin.com/in/laurensjagt/ Website: https://www.cybersecuritydistrict.com/ All channels & newsletter: https://beacons.ai/cybersecuritydistrict

  • S6 · E46
    March 31 · 1 hr 6 min

    From Fintech Founder to Cyber Investor with Chris Zadeh | Cyber Security District

    In this episode of Cyber Security District, we speak with Chris Zadeh, serial entrepreneur, fintech pioneer, angel investor, and author. Chris was founder and CEO of Ohpen, one of the first cloud-native core banking platforms in Europe, orchestrating more than €100 billion in financial flows. After building and scaling Ohpen for ten years, he exited and shifted his focus to investing, launching a dedicated cybersecurity fund and his own investment vehicle. From growing up without financial privilege to becoming one of the early digital banking pioneers at Binck in the Netherlands, Chris shares an unfiltered look at execution, obsession, discipline, and what it truly takes to win in regulated markets. Now Chris is investing in cybersecurity startups, Chris explains what he looks for in founders, why AI is reshaping risk and compliance, and why Europe must rethink digital sovereignty. In this episode, we cover: Chris’ founder journey: from Binck Bank scale-up years to building Ohpen for 10 years What “security-first” looks like in fintech, non-negotiables, resilience, and trust with enterprise buyers Execution culture, exceeding expectations, hiring for discipline, and why culture beats product The shift to investing and why he started a cyber fund and what he looks for in founders What’s next in AI-driven risk, compliance + security convergence, and Europe’s digital sovereignty challenge Timestamps: 00:00 – Intro 00:14 – Meet Chris Zadeh 01:59 – Growing up without financial safety nets 03:14 – Joining BinckBank at 23 06:52 – Scaling to market dominance 08:57 – Wanting to sit at the decision-making table 11:36 – Early infrastructure and security lessons 14:18 – A firewall shutdown incident 17:55 – Leaving to build Open 18:48 – The vision for cloud-native core banking 22:29 – 744 pages of rejection before first contract 27:14 – Migrating €15B live 28:09 – Security as non-negotiable 32:15 – Hiring discipline and execution mindset 35:05 – Culture: exceed expectations or leave 37:35 – The cost of extreme execution 41:21 – Transitioning to investing 44:27 – Why he rejects the “solo entrepreneur” myth 49:35 – Launching the cybersecurity fund 51:16 – AI, compliance, and new cyber opportunities 58:55 – European cloud sovereignty 01:04:03 – Signal message to CSOs: stay curious 01:06:00 – Outro Connect with the guest: Chris Zadeh: https://www.linkedin.com/in/chriszadeh/ Dark Red (Cyber Fund): https://www.darkred.at/ Follow Cyber Security District: Laurens Jagt on LinkedIn: https://www.linkedin.com/in/laurensjagt/ Website: https://www.cybersecuritydistrict.com/ All channels & newsletter: https://beacons.ai/cybersecuritydistrict

  • S6 · E45
    March 17 · 1 hr 1 min

    From 3x CISO to Founder: Building the Tool She Always Needed | Jaya Baloo Founder of AISLE™

    What if the real cybersecurity crisis isn’t attackers, but our own backlog? In this episode of Cyber Security District, we sit down with Jaya Baloo, former CISO at major global organizations including KPN, Avast, and Rapid7 and now founder of AISLE™, an AI-native platform designed to not just detect vulnerabilities, but fix them. After years defending complex enterprises from relentless threats, Jaya made a bold move: stepping out of the CISO seat to build the kind of technology she wished she had. Her mission is clear, eliminate the massive vulnerability backlog that leaves organizations trapped in “security theater” instead of meaningfully reducing risk. This conversation goes beyond buzzwords. We unpack why detection without remediation is broken, how AI can be applied responsibly to actually close security gaps, and what it takes to build transformative security products in stealth. In this episode, we explore: Why Jaya left top-tier CISO roles to start AISLE™ The uncomfortable truth about vulnerability backlogs and unpatched systems Why identity failures remain a systemic weakness How AISLE uses AI for detection, remediation, and verification The importance of stealth mode before going public What leadership looks like in an AI-driven cybersecurity era Key Takeaways: Vulnerability management without remediation is incomplete Security technical debt is evolving into a societal-level risk AI must be paired with verification and human oversight Innovation is essential to preserving true defence in depth The best CISOs stay curious and challenge their own assumptions Timestamps: 00:00 – Introduction 01:20 – Jaya’s transition from enterprise CISO to founder 05:45 – The vulnerability backlog problem 10:30 – Why identity failures remain systemic 16:40 – Building AISLE™: from concept to stealth 22:15 – AI for remediation, not just detection 29:50 – Verification, testing, and human-in-the-loop controls 36:10 – Working with design partners and open-source communities 42:35 – The AI shift in cybersecurity 48:20 – Leadership lessons from the CISO seat 54:10 – Final message to global CISOs Connect with the guest: Jaya Baloo: https://www.linkedin.com/in/jaya-baloo-558492/ Website: https://aisle.com/ Follow Cyber Security District: Laurens Jagt on LinkedIn: https://www.linkedin.com/in/laurensjagt/ Website: https://www.cybersecuritydistrict.com/ All channels & newsletter: https://beacons.ai/cybersecuritydistrict

  • S6 · E44
    Dec 10, 2025 · 53 min

    The AI Deepfake Problem Is Worse Than You Think | Marco Ramilli | Cyber Security District

    In this episode of Cyber Security District podcast, we speak with Marco Ramilli, a cybersecurity visionaire, TEDx speaker, and founder of IdentifAI, a deepfake detection company working at the intersection of AI, trust, and digital identity. From writing early sandboxing papers to leading cyber defense teams and selling his previous startup to VirusTotal (Google), Marco has spent the last two decades safeguarding digital borders. At IdentifAI, he’s now taking on one of the biggest threats of the AI era: manipulated content. Whether it’s fake insurance claims, fraud in football scouting, or synthetic identities onboarding to banks, his platform uses AI to detect AI: verifying whether images, voices, or videos were generated by humans or machines. In this episode, Marco shares his founder story, why he believes the shift from deterministic to probabilistic computing will reshape cybersecurity, and how his latest startup scaled to enterprise use cases within a year. In this episode, we cover: Marco’s hacking origin story and first run-in with his university Researching malware and voting systems at UC Davis Founding his first cybersecurity company in Italy when the market wasn’t ready Bootstrapping a business through 3+ years of break-even before momentum hit Early ransomware response and reverse-engineering threats Getting acquired by Tinexta and integrating into VirusTotal Building IdentifAI to detect deepfakes using AI-powered forensics From onboarding fraud to football scouting scams, real use cases The rise of “digital performers” and the ethics of synthetic content Why deterministic cybersecurity tools are no longer enough The philosophical shift security teams must make to handle probabilistic models Advice for scaling startups, hiring A-players, and letting go as a founder His signal message to CISOs: curiosity will save us Timestamps: 00:00 – Intro 00:14 – Meet Marco Ramilli 01:00 – Hacking the campus network (with a for loop!) 02:15 – Getting caught, and hired for cyber research 03:10 – Reverse engineering malware at UC Davis 04:30 – Cybersecurity in Italy: too early, too expensive 05:45 – Why compliance was seen as a cost 06:20 – Building a company just to be the “owner of his time” 07:00 – Early business struggles & staying focused 08:30 – Why saying “no” saved his startup 10:10 – On embracing failure and learning from loss 11:30 – Curiosity, discomfort, and moving to the U.S. 13:00 – Sleeping on floors and working without backup 14:00 – Founding Yoroi, growing from 4 to hundreds of employees 15:30 – The ransomware era and massive inbound traction 16:45 – Sandboxing: research, papers, and real-world applications 18:00 – Joining Google via acquisition 19:30 – Startup phases and letting go as a founder 21:00 – Hiring advice: don’t save money on great people 23:00 – Launching IdentifAI: how a fake Pope jacket sparked a real mission 25:00 – Building AI to detect AI: early model design 27:00 – From 80% to 96% accuracy in deepfake detection 28:00 – Why images are more dangerous than text 29:45 – The weaponization of synthetic media 31:20 – How IdentifAI detects voice, image, and video manipulation 32:45 – Use cases: banking KYC, insurance fraud, and football scouting 35:00 – API-first strategy and enterprise readiness 36:30 – “Digital Performers” and the ethics of representation 37:30 – Real-time meeting detection via agents 39:00 – Why probabilistic AI is changing the rules 40:00 – How cybersecurity must evolve to deal with uncertainty 43:20 – Deployment flexibility: on-prem or private cloud 46:20 – The philosophical challenge of non-deterministic systems 49:30 – Final message to CISOs: stay curious Connect with the guests: Marco Ramilli: https://www.linkedin.com/in/marcoramilli/ Website: https://identifai.net/ Follow Cybersecurity District: Laurens Jagt on LinkedIn: https://www.linkedin.com/in/laurensjagt/ Website: https://www.cybersecuritydistrict.com/ All channels & newsletter: https://beacons.ai/cybersecuritydistrict

  • S5 · E43
    Sep 30, 2025 · 55 min

    Rethinking Cybersecurity Architecture with Dawnguard’s CTO Kim van Lavieren

    In this episode of Cyber Security District, we sit down with Kim van Lavieren, co-founder and CTO of Dawnguard, a cybersecurity startup that raised millions in funding before registering a company or launching a product. Kim’s story is anything but ordinary, from leading Marines on no-sleep missions to building offensive hacking tools for the Dutch military, to managing massive security teams at Amazon in the U.S., his path combines discipline, vision, and deep technical mastery. Together with co-founder Madi Abdurazak, Kim is now on a mission to completely rethink how cybersecurity should be done, by starting not with alerts or vulnerabilities, but with architecture, policy, and real business risk. Dawnguard is building a platform that automates secure-by-design architecture using AI, aiming to replace an entire category of cloud security tools before most companies even realize there’s a better way. In this episode, we cover: What the Dutch Marine Corps taught Kim about discipline and decision-making How a military comms officer became a cybersecurity architect Building secure systems after discovering flaws in weapons room access Writing offensive tools for the cyber division of the Dutch Armed Forces Why cyber soldiers may be more impactful than boots on the ground Kim’s journey to Amazon and running third-party security at massive scale The mindset shift from “no” to “how” in security engineering The origin story behind Dawnguard and raising millions pre-product How Dawnguard is building a new category for architecture-led security Using AI to design, verify, deploy, and enforce security from day zero Advice for cybersecurity newcomers, and why the industry must rebrand How Dutch risk aversion is holding back innovation — and how to break through Timestamps: 00:00:00 – Intro 00:00:47 – Kim's Background: From Marines to Cybersecurity 00:03:29 – Training Under Extreme Pressure 00:06:28 – Becoming a Communications Officer & Discovering Security Gaps 00:08:18 – First Lines of Code at Age 10 00:10:19 – When Tech & Physical Endurance Collide 00:11:04 – Offensive Cyber Capabilities in the Military 00:14:22 – Why Cyber Soldiers Now Matter More Than Physical Ones 00:17:05 – Consulting, CISO Roles & Joining Amazon 00:18:49 – The Scale & Speed of Security at Amazon 00:21:00 – The Origin of Dawnguard 00:23:00 – Automating Architecture Compliance with AI 00:25:08 – Using Threat Intel & Policy as a Starting Point 00:28:02 – Building the Engine: 5 AIs and a Moonshot 00:30:46 – Meeting Madi & Finding the Perfect Co-Founder Match 00:33:29 – Raising Millions with No Product — and Building a Dream Team 00:36:37 – Rise Into Resilience: What the Dawnguard Slogan Really Means 00:38:08 – Rebranding Cyber: Why the Industry Needs a Makeover 00:39:44 – Advice for People Trying to Break Into Security 00:41:03 – Advice for Aspiring Cyber Entrepreneurs 00:44:42 – Certifications, Labs & Reality Checks 00:47:25 – Going Big Means Accepting Uncertainty 00:49:00 – The 5-Year Vision: Replace Entire Security Categories 00:50:30 – Final Signal Message to CISOs: Security Is Balance, Not Absolutes Connect with the guests: Kim van Lavieren: https://www.linkedin.com/in/kim-v-0645931b4/ Learn more about Dawnguard: https://dawnguard.ai/ Follow Cyber Security District: Laurens Jagt (Host): https://www.linkedin.com/in/laurensjagt/ Website: https://www.cybersecuritydistrict.com All channels & newsletter: https://beacons.ai/cybersecuritydistrict

  • S5 · E42
    Sep 16, 2025 · 46 min

    The Google Security Gap Nobody Talks About with Florbs founders Niek Waarbroek and Tycho Klessens

    In this episode of Cyber Security District, we sit down with Niek Waarbroek (Founder & CTO) and Tycho Klessens (CEO) of Florbs, a Dutch startup transforming file security inside Google Workspace. What started as a simple set of admin scripts has evolved into a powerful SaaS platform, used by global enterprises to automate onboarding, offboarding, and prevent accidental (or malicious) data leaks. Niek shares how his frustrations with error-prone onboarding flows inspired him to build smarter tools, and how a lack of visibility into shared files became a real security threat for many organizations. After bootstrapping Florbs for three years, he crossed paths with Tycho, then a VC investor, who not only became the commercial co-founder, but helped raise €1 million to scale the team. Together, they discuss the power of building with product-led growth, how they’re scaling without wasting capital, and why real file security goes beyond Google’s default settings. They also explain why early-stage cybersecurity startups need more than funding, including focus, clarity, and the right partner chemistry. In this episode, we cover: The original problem Florbs set out to solve inside Google Workspace Why offboarding is one of the biggest overlooked security gaps How ex-employees still access company data without detection From custom scripts to a full-fledged SaaS product Product-led growth without a sales team or marketing budget Raising €1 million from angel investors and CISOs Going from solo founder to building a complementary co-founder team How they’re building safe, reversible file actions with real-time insights Expanding into AI-powered detection and cross-platform collaboration security Lessons learned transitioning from VC investor to cybersecurity CEO Whether you're a CISO, founder, or operator working in Google Workspace or building a startup yourself, this episode shows how automation and visibility can finally close one of the biggest blind spots in modern file security. Timestamps: 00:00 – Intro 01:15 – What Inspired Florbs: The Google Workspace Problem 03:40 – Why Onboarding & Offboarding Create Risk 06:00 – Real-World Cases: Ex-Employees Accessing Confidential Docs 08:45 – Building from Admin Scripts to Full Product 11:30 – Why Google Alone Doesn’t Cut It for File Security 14:50 – The Origins of the Name “Florbs” 18:10 – Google Developer Expert Status & Product-Led Growth 21:00 – Meeting Tycho: From VC Investor to Co-Founder 25:30 – The First Pitch, the Missed Investment & The Unexpected Partnership 30:40 – Raising Smart Capital (Not Just Any Capital) 34:00 – Scaling Carefully: Where the €1M Will Go 37:20 – Building Automated Security Workflows 40:15 – Preventing AI-Fueled Phishing & Lookalike Domain Attacks 44:00 – Hiring Philosophy, Co-Founder Chemistry & Startup Reality 49:00 – Final Advice for Entrepreneurs & First-Time CISOs 52:30 – One Signal Message to CISOs: Don’t Block Everything Connect with the guests: Niek Waarbroek: https://www.linkedin.com/in/niekwaarbroek/ Tycho Klessens:https://www.linkedin.com/in/tycho-klessens-a215abb7/ Learn more about Florbs: https://florbs.io Follow Cyber Security District: Laurens Jagt (Host): https://www.linkedin.com/in/laurensjagt/ Website: https://www.cybersecuritydistrict.com All channels & newsletter: https://beacons.ai/cybersecuritydistrict

  • S5 · E41
    Sep 3, 2025 · 53 min

    Scaling AI-Powered Pentesting Globally with Breachlock CEO Seemant Sehgal | Cyber Security District

    In this episode of Cyber Security District, we sit down with Seemant Sehgal, founder and CEO of Breachlock, one of the fastest-growing offensive security companies in the world. Seemant’s journey took him from a small town in Northern India to leading global cybersecurity teams at ING Bank, before founding a startup that’s now active in over 20 countries. At Breachlock, Seemant is rethinking how offensive security is done. His platform combines automation, AI, and human-led red teaming to deliver scalable Pen Testing as a Service (PTaaS) that addresses the growing inefficiencies of traditional penetration testing. Seemant has built a globally distributed company operating in over 20 countries, while staying close to the ground truth of cyber operations and keeping his team deeply connected to the challenges that security teams face every day. In this episode, we cover: Building a global cyber career without a linear path Lessons from running cybersecurity at ING Bank The inefficiencies of traditional pen testing Starting BreachLock with automation and AI at the core Launching Adversarial Exposure Validation (AEV) Balancing AI and human expertise in offensive security Leading a remote team across 20+ countries Hiring for culture and alignment, not just skills How to sell cyber risk to non-technical stakeholders Message to all CISOs Whether you're scaling a security startup, running a blue team, or navigating board-level cyber strategy, this episode delivers hard-earned insights from someone who's seen the full lifecycle, technical, strategic, and entrepreneurial. Timestamps: 00:00 – Intro 01:10 – Growing Up in Northern India 03:25 – Starting Out in Ethical Hacking at IBM 06:10 – From Defense to Offense: Career at ING Bank 09:00 – Identifying the Pain Points of Traditional Pentesting 11:30 – Founding BreachLock: Automating What Matters 15:40 – What is Adversarial Exposure Validation (AEV)? 19:20 – Scaling with AI, But Keeping It Human 23:45 – Managing a Remote-First Global Team 26:30 – Hiring Philosophy: Look for Disagreement and Culture Fit 30:15 – Translating Cyber Risk for the C-Suite 33:00 – Staying Grounded: Lessons from Building Profitably 36:20 – Advice to Future Founders & Security Leaders 39:00 – Final Message to all CISO’s Connect with the guest: Seemant Sehgal: https://www.linkedin.com/in/s-sehgal/ Learn more about Breachlock: https://www.breachlock.com/ Follow Cyber Security District: Laurens Jagt (Host): https://www.linkedin.com/in/laurensjagt/ Website: https://www.cybersecuritydistrict.com All channels & newsletter: https://beacons.ai/cybersecuritydistrict

  • S5 · E40
    Aug 19, 2025 · 44 min

    From 13-Year-Old Hacker to Cybersecurity Leader with Mischa van Geelen

    In this episode of Cyber Security District, we sit down with Mischa van Geelen, one of the Netherlands’ most remarkable cybersecurity professionals. At just 13 years old, Mischa discovered a critical vulnerability at a major Dutch bank. By 15, he was the youngest full-time pen tester at a global consultancy. Now in his twenties, he’s already co-founded one of the top incident response firms in the country, served as TISO at leading payment institutions like iDEAL and European Payment Institute (EPI) and is gearing up to launch his next venture. Mischa’s story is anything but ordinary. A self-taught hacker turned security strategist, he shares candid insights into the realities of incident response, the pitfalls of “watermelon compliance,” and why cybersecurity must be treated as a business enabler, not a sunk cost. Whether it’s rebuilding a college’s IT infrastructure after a massive ransomware attack or scaling a startup from scratch, Mischa combines technical brilliance with rare clarity on communication, compliance, and leadership. In this episode, we cover: Discovering his first vulnerability at age 13 Interning at ABN AMRO while still in high school Joining a consultancy firm as a full-time pen tester at 15 Building and scaling an incident response company Inside stories from real-world cyberattacks Why most companies still don’t “get” compliance The burnout risk of incident responders His thoughts on AI, deepfakes, and the future of cybercrime Plans for his next cybersecurity venture Advice for aspiring ethical hackers and cyber entrepreneurs Whether you're a CISO, student, founder, or future threat analyst, this episode is packed with valuable lessons and honest reflections from someone who's lived cybersecurity from every angle and isn't done yet. Timestamps: 00:00 – Intro 01:00 – Finding His First Vulnerability at 13 04:20 – Interning at ABN AMRO 07:00 – Getting Misunderstood by the School System 09:40 – Joining a Consultancy as a Teenager 14:00 – Launching a Cybersecurity Company at 17 17:20 – Challenges of Managing Incident Response Teams 22:30 – Real-Life Ransomware Incidents 27:10 – The Reality of 24/7 Cyber Incident Response 31:45 – The Emotional Impact of Cybercrime 34:30 – Working with iDEAL & EPI 38:10 – AI Threats and the Rise of Deepfakes 42:00 – Watermelon Compliance & What’s Broken in Cyber 45:50 – Mischa’s Next Venture: Automating Real Compliance 49:20 – Communication as the Missing Skill in Cybersecurity 52:00 – Final Message to Global CISOs Connect with the guest: Mischa van Geelen: https://www.linkedin.com/in/rickgeex/ Learn more about Anovum: https://www.anovum.nl Follow Cyber Security District: Laurens Jagt (Host): https://www.linkedin.com/in/laurensjagt/ Website: https://www.cybersecuritydistrict.com All channels & newsletter: https://beacons.ai/cybersecuritydistrict

  • S5 · E39
    Aug 6, 2025 · 51 min

    Threat Intel, Startups & Scaling Europe’s Cyber Future with Marco Riccardi

    In this episode of Cyber Security District, we sit down with Marco Riccardi, threat intelligence expert, startup founder, and the mind behind QuoIntelligence. From getting his first computer at age 7 to running cyber operations at Deutsche Bank and the European Central Bank, Marco’s journey is anything but linear. He’s built a deep-tech company protecting European infrastructure, all while fusing AI, geopolitics, and intelligence analysis into a single mission: safeguarding Europe’s digital future. Marco is the founder and CEO of QuoIntelligence, a fast-growing European scale-up tackling the growing need for context-aware threat intelligence. His roots lie in coding and hacking, but his vision is firmly set on building an intelligence powerhouse grounded in critical thinking, geopolitics, and predictive security. In this episode, he breaks down the gaps in the vendor market, why Europe needs its own intelligence solutions, and what it takes to scale a security company without losing its soul. We cover: Marco’s early obsession with computers and hacking His time in military psy-ops and its influence on his thinking Building threat intel teams at European Central Bank and Deutsche Bank Spotting the market gap that led to founding QuoIntelligence The rise of AI in cyber defense and offense Why most security teams fail at scaling His philosophy on intelligence, communication, and critical thinking Lessons from five years of building a remote-first startup The future of European cybersecurity Whether you’re a cyber leader, an aspiring threat analyst, or simply curious about how intelligence intersects with business, this episode offers a raw, honest, and insightful look into one of Europe’s most original cybersecurity minds. Timestamps: 00:00 – Intro 01:00 – Meet Marco Riccardi 04:00 – First Hacking Experiences at Age 11 07:45 – From Military Psy-Ops to Cybersecurity 11:30 – Moving to Barcelona & Malware Research 16:00 – Career at ECB and Deutsche Bank 21:15 – Why Europe Lacked Local Threat Intel Vendors 25:30 – Intelligence as a Business Advantage 30:00 – Building QuoIntelligence 35:50 – Starting a Company During COVID 39:30 – Lessons in Scaling: Hiring Mistakes & Culture 44:00 – The Power of AI in Cybersecurity 48:30 – What Threat Actors Are Doing with AI 53:00 – Advice for Entering Threat Intelligence 58:30 – Final Message to CISOs Worldwide Connect with the guest: Marco Riccardi: https://www.linkedin.com/in/marcoriccardi/ Learn more about QuoIntelligence: https://www.quointelligence.eu Follow Cyber Security District: Laurens Jagt (Host): https://www.linkedin.com/in/laurensjagt/ Website: https://www.cybersecuritydistrict.com All channels & newsletter: https://beacons.ai/cybersecuritydistrict

  • S5 · E38
    Jul 22, 2025 · 42 min

    People over Product with Cyber Investor Mahdi Abdulrazak | Cyber Security District Podcast

    In this episode of Cyber Security District, we speak with Mahdi Abdulrazak, a cybersecurity leader, serial investor, and one of the most remarkable self-made minds in the field. He just left his CISO position SHV Energy, where he led a team of over 100 professionals, but his journey started much earlier as a refugee, a teenage hacker, and a relentless entrepreneur. Mahdi’s story spans continents, industries, and disciplines. Fluent in over 8 languages and driven by curiosity, he's not only built pioneering technology platforms but also invested in some of the most promising cybersecurity startups in Europe, including Hadrian and Workwise, and now his own venture Dawnguard. From building his first tech company in the early 2000s to mentoring the next generation of founders, Mahdi brings a rare blend of street smartness, deep technical insight, and philosophical clarity. After years witnessing how reactive cybersecurity slows innovation, Mahdi is building Dawnguard to make security-by-design the new default, shifting security left from day zero with the power of AI and automation. In this episode, we explore: How growing up in poverty sparked Mahdi’s hacker mindset His first steps into cybersecurity at age 15 Co-founding a platform ahead of its time in smart connectivity Investing in cybersecurity startups across Europe Why he always invests in people, not products Advice for professionals who want to become entrepreneurs How to deal with pressure and avoid burnout in security roles His vision for agentic AI, machine learning, and the future of cyber defense Mahdi speaks with striking honesty about risk, purpose, and what it means to truly contribute. Whether you’re a young professional, a seasoned CISO, or an aspiring founder, this conversation will challenge and inspire you. Timestamps: 00:00 - Introduction 00:40 - Meet Mahdi Abdulrazak 03:00 - From Warzone to Amsterdam 07:20 - Hacking as a Form of Learning 11:00 - Building a Tech Startup in the Early 2000s 16:45 - Investment Philosophy: People over Products 21:30 - Why Dutch Cyber Needs More Startups 25:00 - Becoming CISO of SHV Energy 29:15 - Handling Pressure & Avoiding Burnout 33:50 - Advice for Cybersecurity Entrepreneurs 37:40 - The Promise of Agentic AI in Cyber Defense 41:00 - Leaving a Legacy & Staying Curious 44:20 - Final Message to Global CISOs Connect with the guest: Mahdi Abdulrazak: https://www.linkedin.com/in/mahdiabdulrazak/ Learn more about Dawnguard – www.dawnguard.ai Follow Cyber Security District: Laurens Jagt (Host): https://www.linkedin.com/in/laurensjagt/ Website: https://www.cybersecuritydistrict.com/ All channels & newsletter: https://beacons.ai/cybersecuritydistrict

  • S5 · E37
    Jul 8, 2025 · 49 min

    From Criminology to Cybersecurity Leadership with Fleur van Leusden

    In this episode of Cyber Security District, we sit down with Fleur van Leusden, one of the most visible and respected voices in the Dutch cybersecurity landscape. Fleur is the current Chief Information Security Officer (CISO) at a major Dutch government institution, but her work spans far beyond that. With a background in criminology and a career that began in law enforcement, Fleur has become a strategic advisor to the Dutch education system, a frequent keynote speaker, and the host of one of the most popular cybersecurity podcasts in the Netherlands: CISO Praat. Her journey from internet detective at the Dutch National Police to forensic analyst, consultant, and now solo CISO, reflects the evolution of the cybersecurity field itself. In this episode, we dive into: Her early fascination with law, forensics, and technology Life as an “internet detective” solving high-profile crimes How she transitioned into cybersecurity leadership What it’s like being a one-woman security department Why prioritization is the toughest part of a CISO’s job Managing burnout, pressure, and the “superhero complex” Advice for young professionals who want to follow in her footsteps Fleur shares honest, witty, and insightful reflections on the pressure CISOs face, how to let go of perfectionism, and why community support is crucial in this ever-changing field. Timestamps: 00:00 - Introduction 00:30 - Meet Fleur van Leusden 02:10 - Podcasting and Finding Her Voice 05:00 - From Criminology to Cyber 07:40 - Life as an Internet Detective 13:00 - Joining the Dutch Forensic Institute 17:12 - From Testing to Hacking 21:35 - Becoming a (Bracketed) CISO 25:00 - A Day in the Life of a CISO 28:15 - Prioritization, Politics & Burnout 34:20 - On Thick Skin, Flexibility & Boundaries 38:52 - Community Support Among CISOs 42:00 - Final Message to Global CISOs Connect with the guest: Fleur van Leusden: https://www.linkedin.com/in/fleur-%F0%9F%8E%99%F0%9F%A6%8A-van-leusden-356bb054/ Follow Cybersecurity District: Laurens Jagt (Host): https://www.linkedin.com/in/laurensjagt/ Website: https://www.cybersecuritydistrict.com/ All channels & newsletter: https://beacons.ai/cybersecuritydistrict

  • S5 · E36
    Jun 24, 2025 · 46 min

    Securing the Dutch Railway (NS) with Dimitri van Zantvliet | Cyber Security District Podcast

    In this episode of Cyber Security District, we sit down with Dimitri van Zantvliet, one of the most respected CISOs in the Netherlands and the current Chief Information Security Officer at the Dutch Railway (NS). Dimitri’s career spans from electromechanical engineering on offshore rigs to becoming a national authority on cybersecurity, advising startups, governments, and international councils. He’s the co-founder of the Dutch CISO community, an angel investor, a public speaker, and Dutch ambassador for the Global Council for Responsible AI. Dimitri also serves on advisory boards such as TNO and the University of Amsterdam’s Leadership Academy, shaping the future of digital security on multiple levels. In this episode, we dive into: How Dimitri manages multiple leadership roles with purpose His early transition from engineering into cybersecurity Why public transport is a vital piece of national resilience NS’s approach to defending against state actors and activist threats What makes a strong CISO in today’s geopolitical climate The rise of responsible AI and why it matters now more than ever His advice for cybersecurity founders and next-gen professionals Dimitri shares powerful insights on threat intelligence, incident response, ethical AI, and the evolving role of CISOs in a world shaped by hybrid threats and rapid technological change. Timestamps: 00:00 - Introduction 01:10 - Managing Multiple Roles 04:17 - From Engineering to Cybersecurity 06:54 - Leadership Lessons Learned 10:14 - Importance of Certifications and Grit 13:06 - Cybersecurity Challenges at NS 17:20 - State Actors, NATO, and Public Transport Threats 23:00 - What Makes a Great CISO 28:09 - Responsible AI and Smart Cities 30:38 - Investing in Startups and Supporting Founders 34:45 - Tech Areas to Watch: Compliance, Anomaly Detection, AI Agents 42:41 - Unlimited Resources: What He'd Solve First 44:02 - Advice for Young Cybersecurity Professionals 46:05 - A Final Message to CISOs Worldwide Connect with the guest: Dimitri van Zantvliet: https://www.linkedin.com/in/vanzantvliet/ Follow Cybersecurity District: Laurens Jagt (Host): https://www.linkedin.com/in/laurensjagt/ Website: https://www.cybersecuritydistrict.com/ All channels & newsletter: https://beacons.ai/cybersecuritydistrict

  • S5 · E35
    Jun 10, 2025 · 53 min

    The Infrastructure Behind Smarter SOCs with VirtualMetric Founders

    Title: The Infrastructure Behind Smarter SOCs with VirtualMetric Founders | Cyber Security District Podcast Episode Description: In this episode of Cyber Security District, we sit down with the founders of VirtualMetric, one of Europe’s most promising scale-ups in the cybersecurity space. Meet Yusuf Öztürk, CTO and original brain behind the platform, and Jimmy Wind, CEO and commercial strategist who joined the company to accelerate growth and take it global. VirtualMetric started as a performance monitoring tool but made a smart pivot into cybersecurity, solving one of the biggest pain points for Security Operations Centers (SOCs): the skyrocketing cost and inefficiency of SIEM platforms like Microsoft Sentinel. In this episode, we dive into: How VirtualMetric evolved from IT monitoring to cybersecurity The cost-saving power of their security data pipeline Why Microsoft and MSSPs are embracing their solution Lessons in product-market fit, pivoting, and startup resilience Advice for first-time founders in cybersecurity Yusuf and Jimmy share practical insights on filtering and enriching telemetry data, how to reduce your SIEM bill by 70–80%, and why smart pre-processing is a must-have for every CISO. Key Takeaways: Pre-process your data before it hits your SIEM to save time and money Automation beats manual parsing every time Focus on solving real pain points, not changing behavior Timestamps: 00:00 - Introduction 01:12 - Meet the founders: Yusuf and Jimmy 03:45 - The origins of VirtualMetric 07:32 - Agentless monitoring and breakthrough compression 11:16 - Pivoting into cybersecurity 15:25 - Why current SIEM tools fall short 18:50 - Deep integration with Microsoft Sentinel 22:40 - How VirtualMetric slashes data ingest costs 27:58 - The AI opportunity (and risk) in data pipelines 34:02 - Scaling after investment 41:21 - Advice for cybersecurity founders 47:00 - Final message to global CISOs Connect with the guests: Jimmy Wind (CEO): https://www.linkedin.com/in/jimmywind/ Yusuf Öztürk (CTO): https://www.linkedin.com/in/yusufozturk87/ Follow Cybersecurity District: Laurens Jagt on LinkedIn: https://www.linkedin.com/in/laurensjagt/ Website: https://www.cybersecuritydistrict.com/ All channels & newsletter: https://beacons.ai/cybersecuritydistrict

  • S4 · E34
    Oct 17, 2024 · 52 min

    Not your keys not your tokens with Jean-Paul de Jong

    Welcome to another exciting episode of Cybersecurity District. Today, we're diving into a hot topic—cryptocurrency and cybersecurity—with none other than Jean-Paul de Jong, a partner at BlockFo and a seasoned expert in cyber investigations and blockchain security. With over 30 years of experience, Jean-Paul has worked with multinational enterprises, law enforcement, and intelligence organizations such as the British government and Europol. In 2018, he transitioned into the world of blockchain, where he now plays a key role in fighting cryptocurrency-related crimes. In this episode, we discuss: The mission of BlockFo in combating crypto crimes Real-life cases, including how Hamas funding was tracked using blockchain The challenges in recovering stolen crypto funds The future of cryptocurrency in corporate finance Tips for protecting your crypto investments Jean-Paul also shares his journey from traditional IT roles to becoming a leader in blockchain, offering invaluable insights for both experienced professionals and newcomers to the field. Key takeaways include the importance of hardware wallets, multi-factor authentication, and the growing demand for cybersecurity expertise in the blockchain industry. Timestamps: (00:00) Introduction (00:26) Jean-Paul de Jong’s background and experience (01:20) The mission of BlockFo (02:52) Challenges in resolving crypto crimes (05:06) Real-life case study: Tracking Hamas funding (08:07) Blockchain’s role in tracing transactions (14:23) Jean-Paul’s transition to blockchain (24:52) Cybersecurity for startups (34:36) The future of BlockFo and corporate crypto transactions (39:45) Tips for safeguarding your crypto (51:52) Final message to CISOs Don't miss this engaging and insightful conversation. Tune in to learn from one of the leading minds in cybersecurity. Connect with us: Laurens Jagt on LinkedIn: https://www.linkedin.com/in/laurensjagt/ Jean-Paul De Jong LinkedIn: https://www.linkedin.com/in/jeanpauldejong/ Visit our website: https://www.cybersecuritydistrict.com/ Subscribe to our newsletter and follow us here: https://beacons.ai/cybersecuritydistrict

Showing 1–20 of 21 episodes