284 - 3/9 - CJ Cox, COO @ Black Hills Information Security

Our featured guest this month is CJ Cox, COO of Black Hills Information Security, interviewed by Frank Victory. News from City of Denver, Block, Zvelo, Lares, FusionAuth, RADICL, Ping Identity, Red Canary and a lot more!

We often talk about cybersecurity as a series of technical hurdles, but CJ frames it through Maslow’s Hierarchy of Needs. At the bottom? Paying the mortgage and surviving the 4th-quarter burnout. At the top? Self-actualization. Doing great work with cool people. But here’s the kicker: CJ argues that real security doesn't come from the name on your badge or the company you work for. It comes from your internal capability to learn and adapt.

We’re experimenting with a new, long-form format on the podcast to explore these "human" elements of the industry—the leadership, the culture, and the "why" behind the "how."
Check out the full episode where we discuss:

• Why BHIS says "No" to multi-million dollar buyouts.

• The "Borg" effect of corporate acquisitions.

• Why building a SOC is a three-year slog, not an "easy button."

Come join us on the Colorado = Security Slack channel to meet old and new friends.

Sign up for our mailing list on the main site to receive weekly updates - https://www.colorado-security.com/. If you have any questions or comments, or any organizations or events we should highlight, contact Alex and Robb at info@colorado-security.com

This week’s news:

• Colorado ranks 28th for family-friendly home buyers in national study

• Block cuts 61 Colorado jobs in AI-driven automation push

• Denver turns to AI to help fix permitting speed, consistency

• Denver set to pause data center development as mayor joins call for moratorium

• Colorado man, cybersecurity experts and BBB warn about AI deepfake scams

• Building the Future of Defense Tech

• Your Token Proves Who You Are, Not What You Own

• The Visibility Gap: 5 Purple Team Tests Your EDR is Probably Missing

• AI Model Drift Is Inevitable. Trusted Intelligence Requires Human Supervision.

• Breaking down a supply chain attack leveraging a malicious Google Workspace OAuth app

Upcoming Events:

• Check out the full calendar

• ISSA COS - March Chapter Meeting -3/10

• ISSA Denver - March Chapter Meeting - 3/11

• IdentiBeer - 3/18

• Denver OWASP - MCP LFI in 60 minutes (or your money back) - 3/18

• ISACA Denver - March Chapter Meeting (virtual) - 3/19

• ISC2 Pikes Peak - 3/25

• ISACA Denver - CISA Spring Training Classes - 3/28

View our events page for a full list of upcoming events

* Thanks to CJ Adams for our intro and exit! If you need any voiceover work, you can contact him here at carrrladams@gmail.com. Check out his other voice work here.

* Intro and exit song: "The Language of Blame" by The Agrarians is licensed under CC BY 2.0