I was fortunate enough to attend several security conferences this year, but BlueHat 2024 stood out for its unique format and insightful sessions. I particularly enjoyed the Cloud & Identity Security track at BlueHat, where I found it refreshing to see a presentation from Microsoft’s perspective, highlighting common challenges faced by all security teams regardless of scale.

As someone who has struggled with managing SSH keys across devices and projects, I’ve found that using a password manager like 1Password to securely store and access them has been a game-changer. By utilizing 1Password’s SSH Agent functionality and making some configuration changes, I was able to simplify my workflow, increase security, and reduce the sharing of SSH Keys between different systems and tenants.

I have had to implement encryption in code for services that are implemented in different languages, and getting that to work properly takes a little bit of time. I decided to share the code I used to do it so that others can spend less time figuring it out.

As I reflect on my experiences as a consultant, I realize that being vulnerable is hard, but it’s also essential for growth and learning. I wish I had read Getting Naked earlier in my career because it would have helped me better understand clients’ needs, communicate more effectively, and work smarter.

Investments Unlimited offers valuable insights into the importance of automation and transparency in security. This book thoroughly enforces that security shouldn’t be a blocker to going fast, and that things are not always what they seem at the surface.

I recently experienced a day of driving some of the world’s most iconic cars at Pacific Raceways in Washington, including the Ferrari 488 GTB, Porsche GT3 RS, Lamborghini Huracan, and Shelby Mustang GT500. While I enjoyed all the cars, my absolute favorite was the Shelby Mustang GT500, which felt incredibly powerful and fast.

As I finished reading Product-Led Growth and Escaping the Build Trap , I realized that these books have helped me understand the importance of customer insights in cutting through noise and providing real value during sales cycles. This realization has sparked an interesting intersection with my work in DPIA’s, security, and audit logs.

I’ve caught the bug again - building elaborate lists of modifications for my dream plane, just like I did with cars when I was 13! This time, it’s a 1977 A36 Bonanza. However, I’ve learned that modifying certified aircraft is more complex than in the automotive world, and I’m excited to explore the world of Supplemental Type Certificates (STCs).

As someone who fell into the security field by accident, I’ve learned that passion, empathy for other teams, and understanding of business priorities are essential soft skills for success in this industry. Through my experience, I’ve come to realize that being able to convey these traits can make a candidate unstoppable.

As I reflect on my year, I realize that leading several groups within an Information Security team was a significant departure from being deeply focused on technical details. Despite not meeting my resolution to be more healthy and lose weight, I made progress as a better business partner and took time off to focus on completing my private pilot’s license.