Cybersecurity Mentors Podcast

Send us Fan Mail and we can reply directly!
Can you spend nearly two decades in one career and still successfully make the jump into cybersecurity?
Chris Horner did exactly that.
Before becoming a social engineer/penetration tester and vCISO, Chris spent nearly two decades working in banking. In this episode, he joins John to talk about how he made the transition into cybersecurity, what helped him land his first opportunity, and why the experience from your previous career doesn't disappear just because you're changing industries.
Chris shares how networking became a "long-term job interview," why following up and showing people what you did with their advice matters, and what it was really like stepping into his first professional penetration-testing role.
We also dig into Chris's specialty in social engineering, including how professional phishing campaigns are built, why understanding the client's business matters, and the story of a HIPAA-themed phishing test where more than 80 people submitted their credentials.
We discuss:
• Transitioning into cybersecurity later in your career
• Building relationships instead of simply "networking"
• Turning mentors and professional connections into long-term relationships
• Developing the mindset of a penetration tester
• What labs don't prepare you for in your first cybersecurity job
• The importance of maintaining a beginner's mindset
• How to evaluate the company interviewing you
• Social engineering, phishing, and OSINT
• Safe ways to develop social-engineering skills
• Transferable skills from previous careers
• Why communication and business knowledge matter in cybersecurity
Connect with Chris:

Chris Horner on LinkedIn

Triaxiom Security

Chris's article, "The vCISO: Security Leadership That Grows With Your Business": Read Chris's vCISO article

Resources Mentioned

TCM Security Practical OSINT Research Professional (PORP): PORP Certification

BSides Greenville
Come hang out with us in the Cybersecurity Mentors Skool community. It’s free to join.

Send us Fan Mail and we can reply directly!
What separates great talent from a great résumé, and how can cybersecurity professionals make themselves impossible to ignore?
In this episode of the Cybersecurity Mentors Podcast, John sits down with Mike Sarraille, retired Navy SEAL, leadership expert, Chief Talent Officer at OVERWATCH, and co-author of The Talent War.
Mike shares lessons from Special Operations and high-performing organizations about how we can rethink hiring, identify potential, build stronger teams, and stand out in an increasingly competitive job market.
We discuss:
• Why experience alone doesn’t predict future performance
• “Hire for character, train for skill”
• The character attributes that predict high performance
• Why likability and “culture fit” can lead to bad hires
• How behavioral interviews, simulations, and case studies can reveal how candidates actually think
• What hiring managers should look for in cybersecurity talent
• Why hiring is only the beginning of developing great people
• How candidates can demonstrate drive, curiosity, humility, and preparation
• Why job seekers should interview the company too
• How to make yourself impossible to ignore in a competitive job market
• How AI is changing hiring and the workplace
• Why Mike views AI as a force multiplier
Whether you’re a cybersecurity leader building a team, a hiring manager looking for better ways to identify talent, or someone trying to break into cybersecurity, this conversation offers practical lessons for finding, developing, and demonstrating talent.
Connect with Mike:
Mike Sarraille on LinkedIn
https://www.linkedin.com/in/michaelsarraille

Mike Sarraille
https://mikesarraille.com/

Resources Mentioned

OVERWATCH Mission Critical
https://weareoverwatch.com/

The Talent War: How Special Operations and Great Organizations Win on Talent
https://talentwargroup.com/the-talent-war/

Talent War Group
https://talentwargroup.com/
Come hang out with us in the Cybersecurity Mentors Skool community. It’s free to join.

Send us Fan Mail and we can reply directly!
What does the future of cybersecurity look like, and how can the next generation prepare for it?
In this episode of the Cybersecurity Mentors Podcast, John sits down with Cecilia Marinier of RSAC to talk about cybersecurity innovation, emerging technology, career opportunities, and developing the next generation of cybersecurity professionals.
Cecilia shares her journey from studying political science and psychology and working in national security to helping lead RSAC’s Innovation and Scholars programs.
We discuss:
• Why cybersecurity needs people from many different backgrounds
• Why networking and community are so important for breaking into cybersecurity
• What makes a cybersecurity startup truly innovative
• How AI is changing the cybersecurity market
• RSAC Innovation Sandbox, Innovation Showcase, and Launch Pad
• How startups can differentiate themselves in a crowded market
• Why adaptability and the ability to pivot matter
• The RSAC Security Scholars program and College Day
• How students can gain experience and build relationships in cybersecurity
• The impact mentors can have on someone’s career
• How AI may change entry-level cybersecurity jobs
• Why cybersecurity professionals should start learning and experimenting with AI now
• Finding the cybersecurity career path that matches your interests and existing skills
• Why the cybersecurity community is one of the industry’s greatest strengths
Cecilia also shares a powerful story about John Strand of Black Hills Information Security offering training and mentorship to someone trying to break into cybersecurity, a great example of what this community can look like at its best.
Connect with Cecilia
Cecilia Marinier on LinkedIn
https://www.linkedin.com/in/cecilia-murtagh-marinier-14967/
Resources Mentioned
RSAC Security Scholar
https://www.rsaconference.com/rsac-programs/security-scholar
RSAC College Day
https://www.rsaconference.com/rsac-programs/college-day
RSAC Innovation Sandbox
https://www.rsaconference.com/rsac-programs/innovation/innovation-sandbox
RSAC Launch Pad
https://www.rsaconference.com/rsac-programs/innovation/launch-pad
RSAC Innovation Showcase
https://www.rsaconference.com/rsac-programs/innovation/innovation-showcase
AppSec Village: Attacking AI – Modern Methodology to Test AI Systems with Jason Haddix
https://www.rsaconference.com/Library/webcast/appsec-village-attacking-ai-modern-methodology-to-test-ai-systems
Cybersecurity Career Guide by Alyssa Miller
https://www.manning.com/books/cybersecurity-career-guide
John Strand / Antisyphon Training
https://www.antisyphontraining.com/instructor/john-strand/
Security BSides
https://bsides.org/
AFA CyberPatriot
https://www.uscyberpatriot.org/

Come hang out with us in the Cybersecurity Mentors Skool community. It’s free to join.

Send us Fan Mail and we can reply directly!
Learning cybersecurity does not mean figuring everything out on your own.
In this episode of the Cybersecurity Mentors Podcast, Steve and John explain why following walkthroughs, tutorials, and expert examples is not cheating—it is one of the most effective ways to build practical cybersecurity skills.
Just like musicians, athletes, artists, and apprentices, cybersecurity professionals improve by watching others, repeating proven techniques, and putting in the reps.
We discuss how to move beyond simply copying instructions by asking why each step matters, predicting what comes next, researching what you do not understand, and documenting what you learn.
We also share practical walkthrough resources for:
• Offensive security and capture-the-flag challenges
• SOC analysis and Splunk investigations
• Digital forensics and incident response
• Threat hunting
• GRC and cybersecurity risk assessments
You do not need to create every project or lab from scratch. Follow someone who has already done it, learn the process, make it your own, and eventually help others do the same.
Mimicry is not the opposite of mastery. It is often the first step toward it.
Come hang out with us in the Cybersecurity Mentors Skool community. It’s free to join.

Send us Fan Mail and we can reply directly!
The cybersecurity profession is changing faster than ever.
In Part 2 of our breakdown of the 2026 ISSA Life and Times of Cybersecurity Professionals Report, we explore what 380 IT and cybersecurity professionals say about the biggest challenges facing the industry today.
We discuss:
• Why cybersecurity and IT must work together
 • Is the cybersecurity skills shortage real?
 • How organizations should build better talent pipelines
 • Why AI is a force multiplier—not a replacement
 • The evolving role of today's CISO
 • The leadership, business, and communication skills that matter most
Whether you're trying to break into cybersecurity, advance your career, or become a future security leader, this episode is packed with practical insights you can apply immediately.
Come hang out with us in the Cybersecurity Mentors Skool community. It’s free to join.