S4E13: Resilient Cyber w/ Chris Kulakowski

Threat Hunting & Detection Engineering

In this episode, Dr. Nikki Robinson sits down with Chris Kulakowski, a threat hunter and detection engineer at IBM. They explore the differences between threat hunting and incident response, the value of detection engineering in enhancing security visibility, and how creativity plays a key role in cybersecurity. Chris also shares insights into career pathing for those interested in threat hunting and the importance of collaboration between teams to detect and respond to threats effectively.

Key Highlights:

  • Differences between threat hunting (proactive) and incident response (reactive)

  • The creative "art" of threat hunting and its personalized approach based on skill sets

  • Importance of detection engineering in tailoring rules to organizational environments

  • The role of detection engineers in improving security by customizing vendor rule sets

  • Key challenges in cybersecurity: misconfigurations, user education, and vulnerability management

  • How collaboration between teams enhances threat detection and response

  • Tips for those interested in a career in threat hunting and detection engineering