Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Brex's CISO Mark Hillick on avoiding tool bloat and learning from high-severity incidents

In this week’s episode of The Future of Security Operations podcast, Thomas is joined by Mark Hillick, CISO at Brex. Mark’s experience in the security industry spans more than two decades. He started out as a security engineer at Allied Irish Banks before advancing through companies like MongoDB to become Director and Head of Security at Riot Games. His book, The Security Path, features over 70 interviews with security professionals on their career journeys.

Take the fear out of phishing response: Lessons from Material Security

For modern security teams, phishing remains one of the most persistent and resource-intensive challenges their organizations face. But automating the detection and response to phishing attacks not only saves time, but also reduces errors and strengthens your organization's overall defense.

HyperSOC-2o: The Game-Changing, Analyst-Validated Autonomous SOC

IDC, Gartner, and Cyber Research Analyst Francis Odum validate Torq HyperSOC-2o for establishing the important building blocks for achieving the autonomous SOC. The autonomous SOC is here. It is no longer a distant reality, it’s not a pipe dream, and it’s certainly not just another cybersecurity buzzword.

Importance of Automated Incident Response in Cyber Defense

Breach speed is rising. Attackers are growing more evasive. And the reality is clear—manual incident response can no longer keep pace. Security teams are overwhelmed by alerts, context-switching, and delayed visibility. The time it takes to investigate, triage, and respond can leave critical gaps for attackers to exploit.

How Modern Work Order Tools Are Transforming Maintenance Efficiency

In the chaotic world of facilities management, staying ahead of equipment failures and maintenance requests can feel like playing whack-a-mole with a blindfold on. Maintenance managers juggle dozens-sometimes hundreds-of work orders daily while fighting against the limitations of outdated systems and paper-based processes.

How Python Is Reshaping Cybersecurity Automation

Cybersecurity teams are overwhelmed. Systems are more complex, and data flows nonstop. As attack surfaces grow, real-time responses are not just ideal - they're necessary. Python is quietly becoming the backbone of security automation across many industries, and here's how.

Building better workflows with multiple drafts

In today's security and IT landscape, the workflows that power your operations are not merely convenient tools—they're essential infrastructure. When a phishing detection workflow fails or an access control process malfunctions, the consequences can be severe: security incidents remain undetected, response times suffer, and organizational risk escalates significantly. This reality creates a paradox for teams.

How LivePerson automates vulnerability management to reduce risk

For modern security teams, managing vulnerabilities efficiently is critical to reducing risk and maintaining a strong security posture. However, the sheer volume of vulnerabilities, complex IT environments, and resource constraints make traditional approaches unsustainable. Automating key aspects of vulnerability management not only speeds up remediation, but also ensures consistency and accuracy across the entire vulnerability lifecycle.

Automating your risk register using Tines Records

A risk register is a GRC tool used by teams to identify, assess, and manage various risks within an organization. It acts as a centralized repository and looks at the impact and probability of a risk to prioritize its management. In cyber security, a risk register helps maintain compliance with various standards like the ISO 27001 Information Security Management System (ISMS), NIST SP800-30 Guide for Conducting Risk Assessments, or the new European NIS 2 directive.

All Gas, No Brakes: The Autonomous SOC Revolution is Here

The era of static playbooks and reactive security is over. A new generation of AI-driven security operations is emerging — one that combines cloud-native scale with intelligent, agentic automation to redefine how Security Operations Centers (SOCs) work. As CEO of Torq, I’ve had a front-row seat to this transformation. In speaking with countless CISOs and analysts, one theme rings loud and clear: We can’t fight modern threats with yesterday’s tools.