May 2025 Summaries

In a recent episode of The Future of Security Operations podcast, host Thomas Kinsella converses with Matt Muller, the Field CISO at Tines, about his extensive experience and insights from working with companies like Material Security and Coinbase. Matt discusses his journey from a business degree to becoming a security leader, emphasizing his role in scaling Coinbase's security team from three to fifty personnel and the lessons learned in risk management. The conversation highlights the challenges security teams face in communicating their value, the evolving role of CISOs as chief risk advisors, and strategies for effective security automation. Matt shares his perspective on the importance of refining processes before automating them and the nuanced role of AI in security operations, cautioning against its overuse without proper human oversight. He also critiques the traditional Security Operations Center (SOC) model and stresses the need for better feedback loops and comprehensive training to address the cybersecurity talent gap.

In a recent webinar, Allie Mellen from Forrester Research and Tines CEO Eoin Hinchy discussed the future of Security Operations Center (SOC) automation, emphasizing the role of generative AI (genAI) in enhancing SOC efficiency. GenAI can handle time-consuming tasks such as report writing and language translation, aiding global coordination, but it requires human validation for critical activities to prevent errors. The conversation highlighted the potential of task-specific, agent-focused AI to automate initial triage and some investigation aspects, aiming for high accuracy and explainability. Forrester advocates for SOCs that eschew traditional L1 to L3 structures, suggesting that analysts handle alerts from start to finish for skill development, ensuring talent retention and mentorship. The discussion also clarified that SOC refers to security operations centers, distinct from compliance frameworks, and stressed the need for improved training, as current user training requirements for tools like Security Copilot are extensive and their return on investment is still uncertain.

In a recent episode of The Future of Security Operations podcast, Travis Howerton, Co-founder and CEO of RegScale, discusses his journey from working in government and regulated sectors, including the National Nuclear Security Administration and Oak Ridge National Laboratory, to co-founding RegScale due to inefficiencies in compliance processes. He emphasizes the importance of automation in compliance to alleviate the burdens of traditional methods and highlights RegScale's role in enabling rapid Governance, Risk, and Compliance (GRC) outcomes for major organizations. The conversation covers the challenges of safeguarding sensitive data, the transition from public to private sector leadership, and the integration and limitations of AI in GRC. Howerton advocates for a shift from manual, checklist-based processes to automated systems that empower human decision-making, arguing that AI should enhance rather than replace human roles. He also envisions a future where streamlined security operations prioritize well-integrated tools and playbooks to achieve consistency and efficiency, addressing current data silos and regulatory challenges.

Demand for security analysts is projected to grow significantly over the next decade, prompting those in the field to seek ways to stand out in a competitive job market. A global study conducted by IDC, supported by Tines and AWS, surveyed senior security leaders to identify the top skills that are crucial for a successful career in cybersecurity. The research highlights key competencies such as staying updated on threat actors' tactics, threat hunting techniques, advanced query language skills, malware analysis, obtaining high-level training and certifications, learning to code, and computer forensics techniques. These skills are critical for security analysts to effectively anticipate and respond to evolving cyber threats. The study emphasizes the importance of practical experience alongside formal training and certifications, noting that hands-on experience, curiosity, and initiative can significantly enhance career prospects. Additionally, it suggests that consistent investment in personal development and a proactive approach to learning can help analysts advance in their careers and meet the expectations of hiring managers.

In a recent exploration of AI's adoption in Security Operations Centers (SOCs), a webinar featuring Allie Mellen, Principal Analyst at Forrester Research, delves into the nuanced realities of AI in this field, contrasting optimistic potential with widespread misconceptions. While AI is perceived positively by most security leaders for enhancing the speed of defensive actions, fears persist about its potential to amplify attacks and replace human analysts. However, AI is envisaged as a tool to support rather than replace human teams by automating repetitive tasks and optimizing workflows, thus allowing security practitioners to focus on more complex activities. Experienced practitioners are more likely to benefit from AI, as they can validate AI-generated information, whereas junior analysts may risk acting on incorrect data. AI lacks the capability for full environment visibility due to challenges in data access and integration, and the reliance on chatbots could exacerbate existing silos in security operations rather than facilitate integration.

The Spring 2025 edition of the "You Did What With Tines?!" competition showcased over 75 innovative workflows, reflecting the versatility of the Tines platform across various domains such as security, gaming, and information management. Judges prioritized entries with strong documentation, thoughtful design, adaptability, and clever use of Tines features. The overall winner was EDgaR, a CrowdStrike integration by Tom Power from the University of British Columbia, recognized for its innovative design and practical security solutions. Other category winners included AI-powered workflows for organizing Microsoft Outlook inboxes, interactive app-building like the Game Picker, and automated security auditing processes, all demonstrating how Tines can solve practical problems with ease. The competition also highlighted internal contributions, like Eoin Magner's schedule management workflow, which efficiently organized team tasks and notifications. The event underscored Tines' potential to transform workflows into powerful, practical tools, offering real-world value for organizations and individuals alike.

Scaling IT operations remains challenging despite technological advancements expected by 2025. IT leaders continue to face issues such as high workloads, rising costs, and user demands, compounded by repetitive manual tasks and fragmented tools. These challenges hinder business growth and strain IT teams. However, modern orchestration and automation can enhance service delivery and support. Companies like Tines offer solutions that automate processes like identity lifecycle management and ticket handling, enabling self-service, reducing errors, and improving efficiency. These platforms integrate with existing tools, allowing IT teams to standardize workflows, minimize downtime, and focus on strategic tasks. Real-world examples from companies such as GitLab and Texas A&M demonstrate significant time savings and improved service quality through automation. Tines, with its no-code, vendor-agnostic platform, provides flexible and secure workflow management, enhancing operational efficiency, security, and collaboration across IT environments.

In a recent episode of The Future of Security Operations podcast, Thomas Kinsella interviews Raymond Schippers, a seasoned security leader and co-founder of Huntabil.IT, about his extensive experience in cybersecurity, including roles at Check Point and Canva. Schippers discusses the challenges and strategies involved in scaling incident response as Canva experienced rapid growth, emphasizing the importance of diverse hiring practices and the use of automation to enhance security operations. He reflects on his journey from skepticism to optimism regarding AI's role in security, citing its potential to improve triage and communication within the cybersecurity community. Schippers also highlights the ethical approach of his company, inspired by Canva's model, to prioritize philanthropy and support non-profit organizations without financial barriers, advocating for a broader commitment to doing good within the cybersecurity industry.

Tines participated in Defence Cyber Marvel 4 (DCM4), a large-scale global cyber defense exercise led by the British Army Cyber Association and hosted in Seoul, South Korea, which brought together over 1,000 participants from 27 countries to enhance cyber defense capabilities through collaboration. The event utilized a sophisticated cyber range to simulate real-world systems and networks, integrating emerging technologies like AI and quantum computing to prepare for future threats. Tines, in partnership with Elastic and Endace, supported defending teams by enabling them to deploy resilient, self-hosted detection and response stacks, demonstrating the speed, scale, and flexibility required to adapt to high-stakes cyber incidents. The exercise focused on not only testing processes but also sharing knowledge and building skills, with participants engaging in challenges that simulated real-world cybersecurity incidents. The involvement of technology partners highlighted the importance of international collaboration and the role of modern tools in shaping the future of defense cyber operations.

Workbench has introduced private templates to enhance customization, allowing users to upload various file types, stop in-progress text generation, and configure retries and timeouts. Additionally, self-hosted customers can use custom models with AWS Bedrock. Following a successful same-day shipping event, Tines' Cases team continued to innovate, releasing usability improvements across Cases, Records, and Dashboards, including new sorting and duplication options. An update to the Cases table of contents aims to simplify navigation with new features like an "Activity" section and hidden case blocks. Pages have also been upgraded with looping page elements for a more dynamic experience, along with options to reorder elements and automatically close tabs. Additional features include disabling tunnels, a new function for detecting URLs, improved testing data retrieval, and enhanced webhook support.

In a recent episode of The Future of Security Operations podcast, host Thomas Kinsella interviews Dane VandenBerg, whose extensive career in security includes roles at companies like Microsoft and Circle. They explore several topics, including the persistent challenges faced by security teams over the past 15 years, the importance of integrating threat intelligence into security operations, and the evolving role of AI copilots in cybersecurity. VandenBerg shares insights from his experience in fintech and discusses how personal experiences, like fatherhood, have influenced his approach to risk management. He highlights the necessity for effective communication within security teams and emphasizes the shift in cybersecurity threats, noting the diminishing relevance of malware and the increasing significance of session token security. Additionally, VandenBerg expresses excitement about innovative security tools and stresses the importance of treating internal stakeholders with the same regard as external customers to foster a stronger security culture.

Siobhan Houllahan, the Manager of Sales Development at Tines' Boston office, is dedicated to fostering a collaborative and supportive work environment while emphasizing the importance of continuous learning and curiosity. She balances her work with personal interests such as cooking, baking, boxing, and enjoying the outdoors. At Tines, Siobhan engages in one-on-one coaching, team enablement sessions, and leadership discussions to align sales strategies with the company's goals. She highlights the supportive and humility-driven culture at Tines, exemplified by the CEO's hands-on involvement and the company's focus on simplicity and collaboration. Siobhan is proud of the enablement plans developed with team input, emphasizing the importance of mastering fundamentals and valuing diverse perspectives. She appreciates Tines' user-friendly platform for its flexibility and ease of use, encouraging experimentation and creativity in building automations. Siobhan values the company's culture and credits the leadership and recruiting team for creating a positive and respectful work environment, contributing to Tines' rapid growth.

Blake Coolidge, a sales and go-to-market leader at Tines, is focused on expanding the use of automation to solve business challenges, particularly in IT Operations. Having recently moved to North Carolina and become a new father, Blake enjoys exploring new activities with his wife. Professionally, he aims to shift Tines' go-to-market approach from technical solutions to achieving business outcomes, such as reducing friction and supporting revenue-driving initiatives. His past experience in leading a Sales Development team has cultivated a strong talent engine at Tines, promoting team members to various roles within the company. Blake values the impact individuals can have at Tines due to its smaller size and transparent leadership, encouraging new employees to tackle complex problems. He praises the Workbench product for integrating AI tools securely and efficiently into his workflow, highlighting its utility in streamlining processes like lead routing. Blake expresses enthusiasm for the collaborative culture at Tines and encourages interested individuals to explore career opportunities within the company.