Nathali Cano is a Security Engineer and the founder of Grace In Action, a non profit dedicated to elevating its constituents through awareness and education and career development programs, connecting them to resources and services that they can benefit from, and providing them with basic needs that they wouldn't have access to otherwise.  In Part 2 of our conversation, Nathali talks about:• Rejecting a life of ease for a life of purpose, and the hardship that accompanied that choice• The winding road to becoming an executive recruiter at Amazon• Hacking her way to a job as a security engineer• The ultimate lesson, derived from a dozen years in search of mindfulnessOxeye eliminates the headaches of application security. Visit www.oxeye.io to learn more.

Nathali Cano is a Security Engineer and the founder of Grace In Action, a non profit dedicated to elevating its constituents through awareness and education and career development programs, connecting them to resources and services that they can benefit from, and providing them with basic needs that they wouldn't have access to otherwise.  In Part 1 of our conversation, Nathali talks about:• Her childhood in a violent part of Colombia, where her father was a policeman who constantly fought the might of the drug cartels • Dealing with continual bomb threats as a child• Battling the stereotypes and expectations of being a girl in Colombia• Moving to America, and the danger that accompanied her employment as a babysitter• Her battle against poverty, and being presented with opportunities that pitted her beliefs against the chance to gain financial independenceOxeye eliminates the headaches of application security. Visit www.oxeye.io to learn more.

Richard Stiennon was the second security analyst at Gartner, and the author of seven books, including the bible for analyst relations, "Up and To The Right". Today, he publishes the popular cybersecurity directory and mini history book, The Security Yearbook, and leads IT-Harvest, “The only platform for researching the entire cybersecurity industry".In this episode, we talk about:How he became Gartner's second ever security analystWhen Richard was the CEO of a company bankrolled by Isaiah ThomasHard lessons about entering a market you don’t already knowHow it took 17 years to build the tool he wanted to build - IT HarvestThe multiple books that he’s written, the impact of “Up And To The Right”, and how it mirrors the story of his lifeCleaning his office twice in 15 months while he was the CMO at Fortinet, in preparation to leaveThe highest high, and the lowest low of his career - and why both happened within 2 weeks of each otherLife and career tips from a veteran of the tech world who's started 25 businessesRichard's Author page on Amazon Oxeye eliminates the headaches of application security. Visit www.oxeye.io to learn more.

Ray Espinoza is currently the CISO of Inspectiv, and has held both CISO and other security leadership roles at companies such as Cobalt, Proofpoint, and Medallia. He's a strong advocate of helping others, which manifests itself in his role as high school strength and football coach, as well as his mentorship activities with organizations such as Raices Cyber, Black Girls Hack and Black Girls in Cyber.In this episode, Ray talks about:Growing up surrounded by gangs in Seven Trees, San Jose - and how his identity as protector first emergedHaving his first child at 19, and the major life decision he had to make as a resultHow Pixar helped shape the direction of his careerHis concern about how the role of CISO may evolve in the future Dealing with imposter syndrome, even though he's accomplished an incredible amount professionally - and tips for how to combat it Oxeye eliminates the headaches of application security. Visit www.oxeye.io to learn more.

Grace Chi is the co-founder and COO of Pulsedive, a threat intelligence startup. While her initial interests revolved around the creative arts, her path eventually wound its way to cybersecurity. In this episode, Grace talks about the events, experiences and people that sculpted her journey, and other topics, including:How the goal of finding joy led her on a journey from the creative arts to co-founding a threat intelligence companyHow being the youngest child enabled her to find success in non-traditional pathsVolunteering as a way to making progress in lifeThe future of humans and machines, and whether our digital identities can persist beyond our physical shellsSculpting tiny bagels, art installations and making wedding art for payThe secret to unlocking unique opportunities that you don’t expect, or wouldn’t know how to ask forTips for people pivoting into security from another professionOxeye eliminates the headaches of application security. Visit www.oxeye.io to learn more.

Alethe Denis shot to fame in 2019 when she won the Social Engineering CTF at DEF CON, and was awarded the Black Badge. The hacking world applauded the public manifestation of her superpower - empathy - but success didn't follow immediately.In this episode, Alethe talks about the events, experiences and people that shaped her, including:Being chased by an elephant in the African veldtHow a Soundgarden CD helped her discover her powers of manipulationBeing a victim of online grooming, and being blamed for itEscaping a circle of predators at a Def Leppard concert while in her early teensInadvertently being an accomplice in a spying mission led by her grandmother and aided by her grandfatherThe two most striking things about growing up in South AfricaStarting her own security consulting business to overcome the perception that she was more than "just a social engineer" - and eventually becoming a red teamerHow Lady Gaga helped her overcome tremendous adversity, and the message she'd like to send herAlethe makes some bold admissions about social engineering, and also shares actionable tips for how parents can help ensure that their children do not become victims of online predators.Oxeye eliminates the headaches of application security. Visit www.oxeye.io to learn more.

TRIGGER WARNING: A portion of this episode touches on sensitive topics related to human sex trafficking and child pornography (from minute 46 till the end). Please do not continue listening beyond that point if you find these topics distressful or upsetting.Andres Andreu is currently Senior Vice President and Chief Information Security Officer at 2U, and over his 30 year career, he's also worked as an IT Director, Chief Applications Architect, Chief Security Architect, and CTO, and is the founder of a company that he eventually sold. He is also an author, having written "Professional Pen Testing for Web Applications", and is in the midst of writing his next book, a playbook for CISOs.During this conversation, he talks about:Being held hostage in the Western Sahara desert as an unwitting pawn in a global insurance scam, staying calm through the ‘unpleasantries’, and how his observant nature helped foil the scam attemptThe emotional challenges of working in an NGO that focused on human sex trafficking and counterterrorism, and his exposure to the darkest sides of humankindThe role of graffiti and art in his life, his dream of being a professional artist, his philosophies on art, and how the realization about what it would take to succeed as an artist resulted in a massive career change (you can see his art at https://andresandreu.xyz/ )The challenges of writing a book, and the most fulfilling part about being a technical author (hint: it's not the money)Judo’s mischaracterization as being violent, its role in his personal and professional life, and how practicing judo helped him become a better leaderOxeye eliminates the headaches of application security. Visit www.oxeye.io to learn more.

Anthony Johnson is the founder and Managing Partner at Delve Risk, a market research firm that supports Cyber Security Sales and Marketing teams looking to penetrate Fortune 2000 accounts.He has over 25 years of cybersecurity experience, and has gone from being a hands-on red team technician, to leading some of the largest cyber programs in the world as a Global Chief Information Security Officer (CISO) at companies such as JP Morgan Chase, Fannie Mae, GE Capital Treasury and Capital One.Anthony sat down with Brandon Hoe, our VP of Marketing, and spoke candidly about: Growing up as a latchkey kid - the child of a single parent'Growing up Korean', and how it impacted his life 'Steak tourism' in the cybersecurity industry, and how it originally startedAn imperfect cheesecake, and the necessity of failure as part of his journey to success and acclaimHow a mistake he made resulted in 9,000 machines going into an infinite boot sequenceRaising himself up from poverty to being a highly-sought after CISO and security advisorCreating and managing his own cryptocurrencyMentorship and why he's so passionate about itA poem that inspired his life (and a reading of the poem by Anthony)Oxeye eliminates the headaches of application security. Visit www.oxeye.io to learn more.

The Storm and the Light dives beneath the surface to bring you the stories of people from the world of cybersecurity, shining a light on who they really are, and what made them the people they are today. Along the way, we will understand our guests better, and glean lessons from their lives that might help us become better people and professionals. Oxeye eliminates the headaches of application security. Visit www.oxeye.io to learn more.