OT After Hours

Rockwell Automation

OT After Hours, a podcast about operational technology security, brings you candid conversations with ICS engineers and experts who get the unique challenges you face. Join us for unfiltered stories and advice from the front lines of industrial cybersecurity as we share best practices, lessons learned, and a few laughs along the way.

  1. What's in a Name?

    JAN 21

    What's in a Name?

    In this episode of OT After Hours, Ken Kully (Systems Support Lead for Rockwell SecureOT), sits down with Rick Kaun (Global Director of Cybersecurity Sales), Natalie Kalinowski (Network & Cybersecurity Specialist), and Lance Lamont (Special Projects & Protocols Team Lead), for a lengthy discussion about IT/OT convergence, how Rockwell's SecureOT platform can enable and accelerate advanced security, asset management, and operational efficiency for Rockwell's clients, and why Verve was renamed to SecureOT late last year. Key Takeaways Rockwell's Secure OT Rebranding and Strategic Direction: What was behind the transition from Verve to Rockwell's SecureOT branding? What were the strategic motivations, the business strategy review process, and the implications for product positioning and market approach? Secure OT Platform Capabilities and Value Proposition: What are the SecureOT Platform's technical capabilities? How can it serve as data repository, support advanced security, enable asset management, and drive operational efficiency for Rockwell's clients? Secure Digital Operations (SDO) and IT/OT Convergence: What are Secure Digital Operations (SDO)? What is its organizational structure, and how can it help bridge the gap between IT and OT security practices within manufacturing environments? Regulatory Environment and Security Program Evolution: How does SecureOT address the expanding regulatory landscape for critical infrastructure, the importance of defensible security decisions, and the shift from compliance-driven to programmatic security strategies. Security Culture Versus Rules: What is the distinction between enforcing security through rigid rules versus fostering a culture of security? Subscribe Follow and subscribe for more episodes on Apple Podcasts, Spotify, YouTube, or wherever you get your podcasts. Get in Touch 🔗 LinkedIn | YouTube | X | Contact Us

    52 min
  2. Predictions, Old and New!

    2025-12-18

    Predictions, Old and New!

    In this episode of OT After Hours, Ken Kully (Systems Support Lead for Rockwell SecureOT), sits down with Natalie Kalinowski (Network & Cybersecurity Specialist), Lance Lamont (Special Projects & Protocols Team Lead), Zach Woltjer (Technical Account Manager), and Rick Herzing (Systems Support Analyst) The team reviews last year's predictions for 2025 in industrial cybersecurity, confirming that most came true and discussing their impact on hybrid workforces, regulatory compliance, AI integration, dynamic detection, zero trust, legacy device security, monitoring, and third-party risks. They then discuss emerging cybersecurity threats and trends for 2026, focusing on AI-driven attacks, deep fakes, mandatory MFA, compliance enforcement, insurance-driven resilience, and ongoing supply chain risks. 2025 Predictions Reviewed Hybrid Workforce Risks: TRUE. The expansion of hybrid workforces has increased device risks, with companies adopting solutions like VPNs, MFA, and endpoint protection to mitigate new attack vectors. Regulatory Compliance Challenges: PARTIALLY TRUE. The vagueness of some regulations, the struggle for end users to translate them into actionable metrics, and the slow pace of regulatory change, leave much to be desired. AI Integration in Cybersecurity: TRUE. There has been growing use of AI in cybersecurity products. The SecureOT research team has found AI to be highly confident but only moderately accurate, underscoring the importance of human oversight. Dynamic Detection and Zero Trust: TRUE. The shift from signature-based detection to dynamic methods due to adaptive malware, has been ongoing for years. Zero trust policies have become more prevalent. Legacy Device Security and Obsolescence Planning: TRUE. The persistent challenge of securing legacy devices in industrial environments continues unabated. Monitoring and Third-Party Risks: PARTIALLY TRUE. Combining passive and active monitoring tools is not on track to become a standard in OT cybersecurity. But there is growing concern over third-party risks and the mitigation thereof, especially with new compliance requirements like the Cyber Resiliency Act. Predictions and Trends for 2026: AI-Driven Cyber Attacks: We can expect to see more end-to-end AI cyber attacks. There is potential for increased automation and sophistication, including lateral movement into OT environments. Deep Fakes and Social Engineering: We can expect to see an expansion in the ongoing threat posed by deep fakes and phishing, given the growing ease of generating convincing audio and images. Mandatory MFA and Compliance Enforcement: We are unlikely to see truly mandatory MFA adoption; that legal compliance and fines may well be necessary for widespread adoption, especially in OT. Insurance-Driven Cyber Resilience: Insurers may drive faster adoption of cyber hygiene practices by requiring verified resilience for coverage. Some companies may choose pay fines instead. Supply Chain and Open Source Risks: The threat of supply chain infections, especially with increased AI-generated code contributions, will grow in the year to come. Organizations should focus on retaining skilled software engineers to validate code. Subscribe Follow and subscribe for more episodes on Apple Podcasts, Spotify, YouTube, or wherever you get your podcasts. Get in Touch 🔗 LinkedIn | YouTube | X | Contact Us

    59 min
  3. Back from Automation Fair

    2025-11-26

    Back from Automation Fair

    In this episode of OT After Hours, Ken Kully (Systems Support Lead for Rockwell SecureOT), sits down with Natalie Kalinowski (Network & Cybersecurity Specialist), Tyler Bergman (Operations Team Lead) and Lance Lamont (Special Projects & Protocols Team Lead) to discuss the recently-concluded Rockwell Automation Fair. And if you weren't able to attend Automation Fair, you can still find videos and presentations from it on the Rockwell YouTube channel. Key Takeaways Automation Fair is a major annual event held by Rockwell Automation, attracting both employees and customers. The event features workshops, tech demos, and product displays, not unlike a mini-CES for Rockwell, its partners, and its clients. Workshops ranged from basic controller programming to advanced topics like CPWE design with Cisco and Powerflex fundamentals. Keynotes are a valuable way to gauge Rockwell's strategic direction, including the announcement of a $2 billion investment in a new greenfield facility in southeastern Wisconsin, set to open in 2028 as a showcase for automation, AI, robotics, and cybersecurity. Numerous robotics demos at the Automation Fair, including collaborative robots (cobots), multi-brand robot arm interoperability, and advanced material handling systems. Verve Industrial Protection has been rebranded to Rockwell Secure OT, which was a prominent presence in Rockwell's display area. Lots of conversations at the SecureOT booth, discussing asset inventory, risk analysis, and the new risk scoring features, while engaging with customers and IT/OT professionals to address practical use cases and integration challenges. Vibrant event culture, including pin-collecting, and swag at the SecureOT booth, the role of casual interactions in networking, and the significance of shared spaces like the lunch hall in fostering connections among attendees. Timestamps 00:36 – Preamble and recording kickoff 00:56 – Introductions by Lance, Tyler, and Natalie 01:37 – What is the Automation Fair, and where was it held? 04:54 – Robots, cobots, and robot inter-operatbility 18:04 – Workshops, keynotes, and collectible pins 27:26 – Massive space for lunch...and networking 28:11 – FIRST Robotics and Student Mentorship 32:25 – The SecureOT Booth Experience 46:24 – Wrap-ups, more robotics, and final takeaways Subscribe Follow and subscribe for more episodes on Apple Podcasts, Spotify, YouTube, or wherever you get your podcasts. Get in Touch 🔗 LinkedIn | YouTube | X | Contact Us

    52 min
  4. The SkillBridge Path

    2025-08-28

    The SkillBridge Path

    In this episode of OT After Hours, host Ken Kully, Systems Support Lead at Verve Industrial, sits down with Zach Woltjer and Connor Murphy, Technical Account Managers at Rockwell Automation to explore how the U.S. Department of Defense's SkillBridge program is helping veterans transition into civilian careers in OT cybersecurity. Zach shares how his own journey through SkillBridge not only eased his transition out of the military but also inspired him to help set up the program at Verve. Connor recounts his path from military intelligence into OT security, proving that determination, adaptability, and soft skills can open doors—degree or no degree. Together, their stories highlight how military training and mindsets translate into critical skills for protecting industrial infrastructure. Key Takeaways SkillBridge as a bridge: A program designed to help military personnel transition smoothly into civilian careers, including cybersecurity roles. Soft skills are critical: Strategic thinking, adaptability, and communication—often honed in the military—translate directly to success in OT security. From intel to OT security: Zach and Connor share how experiences in military intelligence prepared them for cybersecurity careers. The value for companies: SkillBridge allows organizations to bring in talented veterans, "test drive" potential hires, and diversify teams with unique backgrounds. Degree not required: Connor's success story emphasizes that curiosity, drive, and continuous learning matter as much as formal education. Timestamps 00:00 – Introduction and overview of career-focused mini-sodes 02:30 – Introducing Zach Woltjer and Connor Murphy 03:08 – What the SkillBridge program is and why it matters 07:40 – Zach's path: military service, mentors, certifications, and SkillBridge experience 13:57 – Bringing SkillBridge to Verve and recruiting Connor into the program 17:20 – Connor's journey: transitioning out of the Air Force, overcoming doubts, and gaining new skills 24:18 – How SkillBridge works for companies: processes, intermediaries, and benefits 32:29 – Why veterans should consider SkillBridge when transitioning out 34:52 – Challenges of shifting from military to civilian culture 36:34 – Final reflections on SkillBridge and its impact on careers in OT cybersecurity Guest Information Zachary Woltjer: Technical Account Manager at Rockwell Automation. A U.S. Air Force veteran who helped establish the SkillBridge program at Verve, bridging military expertise with civilian OT cybersecurity needs. Connor Murphy: Technical Account Manager at Rockwell Automation. An Air Force veteran who transitioned into OT cybersecurity through SkillBridge, now focused on supporting clients and advancing his cybersecurity career. Subscribe Follow and Subscribe for more episodes on Apple Podcasts, Spotify, YouTube, or wherever you get your podcasts. Get in Touch 🔗 LinkedIn | YouTube | Twitter/X | Contact Verve | Listener Q&A

    38 min
  5. From a TRS-80 to OT Cybersecurity

    2025-08-22

    From a TRS-80 to OT Cybersecurity

    In this episode, we trace the career of Tyler Bergman, Operations Team Lead at Rockwell Automation (formerly Verve Industrial), whose early fascination with computers and programming sparked a path that led through SCADA operations, utility cooperatives, and consulting before finding a home in OT cybersecurity. Join host Ken Kully, Systems Support Lead at Verve Industrial, as Tyler shares how persistence, hands-on experience, and a thirst for knowledge shaped his expertise—and why networking fundamentals are the backbone of OT security. Key Takeaways A lifelong passion for technology: From programming on a TRS-80 as a child to building custom systems for nonprofits, Tyler's curiosity and drive shaped his technical foundation. SCADA and utility experience: Years spent in municipal and cooperative environments provided hands-on exposure to the OT landscape long before "OT security" was a defined field. The value of persistence: Earning a CCNA after multiple attempts showed the resilience required to keep advancing in cybersecurity. Networking as the cornerstone: Understanding networks and how devices present themselves is one of the most critical skills in OT security. Bridging OT and IT: Tyler's background gave him unique insight into why protecting critical infrastructure requires a balance of availability, reliability, and security. Timestamps 00:00 – Early fascination with robotics, the TRS-80, and programming in BASIC 03:06 – High school years, military service, and starting a consulting business 05:46 – Transition into networking, SCADA operations, and pursuing certifications 12:01 – Cybersecurity experiences, OT systems, and utility cooperative work 14:03 – Joining Verve Industrial and focusing on OT cybersecurity 18:30 – Reflections on career path, lifelong learning, and excitement for future challenges Guest Information Tyler Bergman: Lead of the Field Deployment Team at Rockwell Automation (formerly Verve Industrial). With more than two decades of experience spanning SCADA operations, utilities, consulting, and networking, Tyler brings deep insight into the intersection of operational technology and cybersecurity. Passionate about hands-on problem solving, persistence in learning, and building secure critical infrastructure. Subscribe Follow and Subscribe for more episodes on Apple Podcasts, Spotify, YouTube, or wherever you get your podcasts. Get in Touch 🔗 LinkedIn | YouTube | Twitter/X | Contact Verve | Listener Q&A

    19 min
  6. From Snowboarding Slopes to Securing OT Networks

    2025-08-15

    From Snowboarding Slopes to Securing OT Networks

    In this episode, we follow the unique career journey of Natalie Kalinowski, Network & Cybersecurity Specialist at Verve Industrial, from teaching snowboard lessons to managing complex industrial network security. Join host Ken Kully, Systems Support Lead at Verve Industrial, as Natalie shares how international internships, early career programs, and continuous learning shaped her expertise—and her advice for anyone looking to break into OT security. Key Takeaways Career pivots can start anywhere—Natalie's path began on the slopes and in hands-on engineering internships across the Dominican Republic and Germany. Rockwell Automation's EDGE program provided foundational OT automation skills, bridging the gap from theory to real-world application. Continuous upskilling through certifications (CISSP, CCNA, FEMA courses) and self-directed study is key to keeping pace in a fast-evolving field. Strong communication skills—especially with global teams—are as critical as technical knowledge in OT security. For newcomers: pursue foundational certifications, gain experience in IT or OT support roles, and immerse yourself in industry news and terminology. Timestamps 00:00 – Introduction & early jobs: teaching snowboarding and discovering manufacturing 02:10 – Engineering studies at Marquette University & global internships (Dominican Republic, Germany) 04:15 – Why manufacturing offered the variety and challenge Natalie wanted 05:30 – Joining Rockwell Automation through the EDGE early-career program 07:20 – Gaining hands-on experience in networks, automation, and OT environments 09:00 – Transitioning to network and cybersecurity focus 10:15 – Rockwell's acquisition of Verve and upskilling in cybersecurity 13:00 – Certifications and training: PSIRT, CVSS, CCNA, FEMA, CISSP prep 15:40 – Overcoming imposter syndrome and building communication skills 19:05 – Working with global teams and adapting communication for non-native English speakers 21:00 – Advice for newcomers: certifications, entry-level IT/OT roles, learning the lingo, and staying informed Guest Information Natalie Kalinowski: Network & Cybersecurity Specialist at Verve Industrial with a background in computer engineering, global manufacturing internships, and OT network design. Passionate about continuous learning, cross-cultural communication, and mentoring new entrants into the cybersecurity field. Subscribe Follow and Subscribe for more episodes on Apple Podcasts, Spotify, YouTube, or wherever you get your podcasts. Get in Touch 🔗 LinkedIn | YouTube | Twitter/X | Contact Verve | Listener Q&A

    16 min
  7. From Embedded Developer to OT Protocol Sleuth

    2025-08-08

    From Embedded Developer to OT Protocol Sleuth

    In this episode, we explore how an embedded-systems engineer became the leader of Verve's Special Projects & Protocols team—and what his journey says about recruiting, culture, and continuous learning in OT security. Join host Ken Kully, Systems Support Lead at Verve Industrial, and his guest Lance Lamont, Manager for Special Projects & Protocols, as they discuss career pivots, protocol reverse-engineering, and building low-ego teams that thrive on curiosity. Key Takeaways Transferable skills matter: deep protocol expertise from product engineering can power OT-security research Flexibility attracts talent: "We want you for your skills, not your hours" sealed Lance's mid-pandemic move to Verve Low ego, high curiosity: teams grow faster when members admit mistakes and chase answers together Diverse entry points strengthen outcomes: mixing maker-space tinkerers, robotics alumni, and anime-inspired problem-solvers yields broader perspective Timestamps 00:00 – Introduction and sound check 00:05 – From touch-screen drivers to a LinkedIn message that changed everything  02:45 – Turning down (then accepting) the offer: balancing parenting and remote work  05:20 – "Skill collector" mindset and early protocol wins  07:10 – Maker-space leadership and the value of empowering others  09:38 – Imposter feelings, confidence, and the culture of asking questions  11:30 – Hiring for curiosity and low ego: what Lance looks for in new team members  13:00 – Closing thoughts on continuous learning and career growth Guest Information Lance Lamont: Manager, Special Projects & Protocols at Verve Industrial. Former embedded developer (power tools, automotive, touchscreens) who now leads a multidisciplinary research team reverse-engineering OT communication protocols. Subscribe Follow and Subscribe for more episodes on Apple Podcasts, Spotify, YouTube, or wherever you get your podcasts. Get in Touch 🔗 LinkedIn | YouTube | Twitter/X | Contact Verve | Listener Q&A

    12 min

About

OT After Hours, a podcast about operational technology security, brings you candid conversations with ICS engineers and experts who get the unique challenges you face. Join us for unfiltered stories and advice from the front lines of industrial cybersecurity as we share best practices, lessons learned, and a few laughs along the way.