- Resilient Cyber
- Posts
- S4E13: Resilient Cyber w/ Chris Kulakowski
S4E13: Resilient Cyber w/ Chris Kulakowski
Threat Hunting & Detection Engineering
In this episode, Dr. Nikki Robinson sits down with Chris Kulakowski, a threat hunter and detection engineer at IBM. They explore the differences between threat hunting and incident response, the value of detection engineering in enhancing security visibility, and how creativity plays a key role in cybersecurity. Chris also shares insights into career pathing for those interested in threat hunting and the importance of collaboration between teams to detect and respond to threats effectively.
Key Highlights:
Differences between threat hunting (proactive) and incident response (reactive)
The creative "art" of threat hunting and its personalized approach based on skill sets
Importance of detection engineering in tailoring rules to organizational environments
The role of detection engineers in improving security by customizing vendor rule sets
Key challenges in cybersecurity: misconfigurations, user education, and vulnerability management
How collaboration between teams enhances threat detection and response
Tips for those interested in a career in threat hunting and detection engineering