909Exec

909Exec Podcast

The 909Exec Podcast Hosted by Den Jones, CEO of 909Cyber, this podcast dives into real-world leadership with insights from top execs across industries. From startups to global giants, Den brings wit, wisdom, and his signature Scottish flair to every episode—helping you lead smarter, grow faster, and avoid the pitfalls.

  1. 5d ago

    Episode 70: The Hiring Revolution: Fraud, AI, and the Future of Talent Acquisition with Justin Dixon

    Join 909 Exec host Den Jones in conversation with Justin Dixon, founder of Hire Tomorrow, as they explore how AI is transforming talent acquisition—from automating recruitment workflows to enabling sophisticated interview fraud. Discover why deepfakes, proxy interviews, and AI-generated resumes are creating unprecedented hiring risks, and learn practical strategies for protecting your organization while maintaining a human-centered candidate experience. EPISODE HIGHLIGHTS: - The Evolution of Recruitment and AI's Disruptive Impact Justin traces his 20-year career from pre-LinkedIn era to founding Hire Tomorrow, explaining how each technological innovation was predicted to eliminate recruiters but instead amplified their importanceKey quote: "Every innovation was supposed to crush the recruiter and make us irrelevant, and it's only made us more important." - AI's Double-Edged Sword in Talent Acquisition Discussion of how AI enables both recruiter efficiency and candidate-side manipulation The resulting flood of applications has overwhelmed hiring managersKey quote: "They're competing with other AI generated resumes and fake people. And it's just a less personal human to human process." - The Risks of AI-Powered Interviewing Justin explains why some companies use AI bots for first-round interviews and the significant legal and brand risks involvedAI interviews create potential discrimination liability when candidates reveal protected information that's recorded and storedKey quote: "You can control what an AI bot asks... but you're dealing with a human on the other side of the line, so you really can't control what they respond with." - The Real Story Behind Tech Layoffs and AI Analysis of how post-COVID overhiring, macroeconomic pressures, and interest rate hikes & AI are driving workforce restructuringCompanies now mandate AI replacement attempts before rehiring departed roles, and outsourcing to lower-cost regions compounds the trendKey quote: "If this person leaves, I want you to show me that you tried to replace that person and/or some of their responsibilities using AI." - Interview Fraud: From Deepfakes to Proxy Candidates Justin details sophisticated fraud schemes: North Korean laptop farms, deepfake technology substituting different people across interview rounds, real-time AI assistance during technical assessments, and friends completing math/coding testsKey quote: "One person shows up to the actual recruiter interview... and then another person shows up to that interview and they're using deep fake technology so it looks like the same person." - Reputational Risk and Responsibility in Recruitment Discussion of shared accountability between recruiting firms and hiring organizations when fraudulent candidates slip throughKey quote: "If I would have supplied a candidate that turned out to be a nefarious actor... that is obviously not something that I want as my reputation." - The "Hire the Hacker" Threat Vector Den Jones introduces a critical cybersecurity perspective: interview fraud as an insider threat vector that traditional defense strategies never consideredKey quote: "I don't need to hack the company. I just get a job now." - Endurance, Discipline, and First-Time CEO Challenges Justin shares his Ironman journey (2.4-mile swim, 112-mile bike, 26.2-mile run) and parallels between extreme athletic discipline and executive leadershipDiscussion of founder-to-CEO transitions and why different leaders thrive at different company stagesLaunch of Growth Capital Podcast's third year covering startup founders, investors, and scaled CEOs - Candidate Experience as Brand Imperative Justin's closing wisdom on treating hiring and firing as brand-defining moments that cascade through professional networksKey quote: "Candidate experience is the best kind of branding you can think about because if you have a bad candidate experience, that candidate's going to tell all their friends about how poor it was."

    Episode 70: The Hiring Revolution: Fraud, AI, and the Future of Talent Acquisition with Justin Dixon
  2. Sep 27

    Episode 69: Built Wrong: Why Cybersecurity Is Failing and What We Must Do About It with Richard Bird

    Richard Bird, a 25-year cybersecurity veteran and former Global Head of Identity at JP Morgan Chase, joins Den Jones to deliver a frank, data-driven indictment of how cybersecurity has been measuring the wrong things for decades. They explore why increased spending hasn't made organizations safer, what three metrics actually matter, and how to rebuild on outcomes over activity. EPISODE HIGHLIGHTS: Richard Bird's Career JourneyRichard describes his accidental entry into identity at JP Morgan Chase, managing a global function before moving to startups and VC.Key quote: "I'm in the third stage of my career. I'm learning something new every day... none of which were things that I was ever exposed to prior to about 2018, 2019."Announcing the Book: Built WrongRichard introduces Built Wrong: Why Cybersecurity is Failing and How We Can Rebuild It, a systemic diagnosis backed by over 110 citations.Key quote: "The most important thing that I'm trying to answer with this book is are we getting safer today versus where we were yesterday?"The Hacker in a Hoodie IndexA presentation sparked the metaphor comparing adversary ROI against defender spending.Key quote: "The bad guys are doing six times better on the invested dollars that they're using to attack things than we're doing on the dollars that we're spending to protect things."Measuring Activity Instead of OutcomesCybersecurity fails to measure performance in financial terms. FBI IC3 data shows losses grew from $800M to over $21B in ten years alongside rising security spend.Key quote: "We're spending more money and losing more money. This is not a business that anybody would invest in."The Myth of the Sophisticated AdversaryMost breaches are not novel or sophisticated; the same problems recur yearly.Key quote: "We can't even fix the problems that we know about... hundreds of thousands of breaches and exploits every single year, and we haven't improved on a single one."Stop Using the Word "Risk"Risk is a financial term. Allowing excessive standing privileges that lead to a breach is a bad decision, not risk.Key quote: "Risk is what is left over when you have done what you are able to... none of that was risk. That was all self-chosen."Self-Perpetuating Mythology30 years of wrong metrics reinforce bad behavior and defeatist narratives.Key quote: "We are literally the only profession in the corporate world that gets up in the morning and goes, I'm going to go to work and get my ass kicked."The Three Metrics That MatterCurrent practice lacks three vital measures: Exposure (attack surface), Interdiction (stopping exploitation), and Consequence (containing blast radius).Key quote: "There are only three things that need to be measured in security, and these manifest virtually nowhere on the planet currently today."Compliance Frameworks & Outdated ControlsNIST, CMMC, and ISO frameworks create a self-sustaining revenue machine without reducing risk.The IT Operations Origin StorySecurity metrics originated from 1980s IT ops, treating security like uptime rather than safety.How to Fix It: Aviation & Safety EngineeringRemediation requires safety engineering, day-over-day safety tracking, and NTSB-style forensic disclosure.Business Economics & CybersecurityApplying unit costing and performance compensation to integrate security into business operations.Stewardship & Digital TrustOrganizations have a core obligation to protect customer data to restore broader digital trust.

    Episode 69: Built Wrong: Why Cybersecurity Is Failing and What We Must Do About It with Richard Bird
  3. Sep 10

    Episode 68: From Burnout to Breakthrough: Leading with Energy, Security, and Purpose with Eric Reiners

    In this episode, Den Jones sits down with Eric Reiners, CTO of Aprive, executive coach, and author of The Energy Edge, for a wide-ranging conversation on technical leadership, executive burnout, personal security, and the enterprise future of AI. Eric shares the raw story of collapsing from exhaustion during a cybersecurity incident and how that transformed his approach to leadership, health, and purpose. -> Introduction and Guest Overview Den introduces Eric, who outlines his roles at Aprive and Be Well Mind.Key quote: "We're digital bodyguards for executives. Think of us as applying enterprise-grade technology to the individual and the family." -> From Farm Kid to Silicon Valley Raised on a farm, Eric taught himself to code on a Commodore 64. After studying physics and musical acoustics, he moved to San Francisco in 1999 to become a C++ developer.Key quote: "I found out that you can make money as a programmer. I didn't even know that really." -> Transitioning from Contributor to Manager Eric reflects on struggling as a manager for three years by clinging to technical work until a mentor helped him master delegation.Key quote: "People need autonomy... You're responsible for growing that team faster than the business needs them to." -> Burnout, Morale, and Loyalty A discussion on post-layoff morale, highlighting four drivers of motivation: autonomy, curiosity, mastery, and purpose.Key quote: "Having low standards is condescending. If you don't expect a lot from your team, you're not going to get a lot." -> Managing Chronic Stress Eric likens unresolved stress to buzzing electrical wires, warning against long-term accumulation.Key quote: "Biology will always win in the end... if you keep doing that, it's going to accumulate." -> Leaving Rapid7 for Entrepreneurship Realizing his motivation had faded, Eric transitioned to coaching, completing 850+ free sessions that built the foundation for Be Well Mind.Key quote: "I was successful on paper but miserable inside." -> Aprive: Security Beyond the Perimeter Aprive targets the security vulnerabilities created when executives leave corporate networks and use personal devices.Key quote: "The corporate perimeter stops and you go on vacation... and occasionally you need to transact business." -> "The Energy Edge" Book Eric introduces his book covering nine science-backed practices to manage stress and decision fatigue.Key quote: "I wish I would've had this before I responded to my first security incident." -> Stress as a Signal, Not an Enemy Challenging work-life balance tropes, they discuss how passion and stress intertwine.Key quote: "The term work-life balance pisses me off a little bit because if you're passionate about something... you're going to fall asleep thinking about it." -> Deep Work and Meeting Culture Tactics for team productivity, including "No Meeting Fridays" and purging recurring calendar invites.Key quote: "There's no research that backs up the idea that working longer hours makes you more productive." -> AI, Executive Readiness, and ROI Examining the gap between AI hype and real ROI, including shadow AI usage and token costs.Key quote: "If they don't have a policy, that just means everybody's using AI in shadow versions." -> Closing Advice Final guidance for high-stress leadership.Key quote: "Your body is telling you something and you can listen and learn from it... you are not alone."

    Episode 68: From Burnout to Breakthrough: Leading with Energy, Security, and Purpose with Eric Reiners
  4. Aug 24

    Episode 67: From Family Scam to Community Shield: How One CISO's Personal Crisis Sparked a Mission to Protect Everyone with Alex East

    When cybersecurity veteran Alex East discovered his father-in-law had lost tens of thousands to a lottery scam, it sparked a mission beyond corporate security. Join host Den Jones as he explores East's journey from protecting Fortune 500 companies to writing books that shield seniors, children, and small businesses from cyber threats. This conversation reveals how personal experience can drive meaningful change in cybersecurity education and community protection. EPISODE HIGHLIGHTS: [00:02:49] - Career Evolution and AI's Impact Discussion of how sales engineering roles have evolved from scripted demos to technical implementationsKey quote: "I think with AI now, it's a lot more nebulous. You can do exactly the same thing in one LLM as another one and get a completely different output."[00:08:03] - The AI Visibility Problem CISOs struggling with unknown AI applications in their environmentsKey quote: "They don't know what AI applications people are using in their environments. They don't know if it's good or if it's bad."[00:13:21] - The Personal Crisis That Changed Everything How a doubled phone bill revealed father-in-law's lottery scam victimizationKey quote: "He'd lost tens of thousands of dollars to this lottery scam. So that was when my wife said, 'Look, you've spent the better part of 30 years protecting corporations from being breached. What about something for the ordinary people?'"[00:15:55] - Community Impact Through Book Giving Gave away 4,000 copies of first book to maximize reachKey quote: "Some people come up and they say, 'Oh, we bought this book for my dad.' And soon after he'd read it, he actually received a phone call from someone pretending to be from Medicaid. And because he'd read your book, he said, 'No, I'm going to verify this before I do anything.'"[00:21:34] - Publishing Lessons Learned Importance of professional editing and copyright protectionKey quote: "Finding an editor that does that is more of a collaborator is super helpful. Unless you are a career author, which I'm not, that is a massive thing."[00:25:07] - Upcoming AI Scam Survival Guide New book targeting AI-enabled scams across all demographicsKey quote: "Now with AI, they can attack small businesses at scale with a minimum of effort. And now they're the biggest target there is out there."[00:28:39] - The Password Security Paradox Advocating for physical password storage over digital managersKey quote: "The most secure way of storing passwords is in one of these. You write them all down, you keep them locked in your drawer, and you rotate them every three months. And that's the most secure way. It's a hundred percent unhackable."[00:33:04] - Conference Innovation vs. Bandwagon Jumping What excites and frustrates at cybersecurity conferencesKey quote: "All you have to do is show me how you save me time, save me money, keep me safe. That's it. Show me those three things and I'll pay whatever it is."[00:39:15] - Final Wisdom for CISOs Essential advice for handling AI in organizationsKey quote: "In the world that we are right now, get a handle on AI before AI runs amuck. Get guardrails around it, know what you've got, know what it's used for, and put bubble wrap around it."

    Episode 67: From Family Scam to Community Shield: How One CISO's Personal Crisis Sparked a Mission to Protect Everyone with Alex East
  5. Aug 9

    Episode 66: From Chemical Engineering to Cybersecurity: Building Veriom and Breaking Into Silicon Valley Nuria Manuel

    DESCRIPTIONJoin Den Jones as he sits down with Nuria Manuel, co-founder and CEO of Veriom. From her origins in Angola and a background in chemical engineering to building a platform that maps architectural weaknesses before they become vulnerabilities, Nuria shares her unconventional path to cybersecurity. This episode explores her bold decision to extend her stay in San Francisco after the RSA Conference, the contrasts of fundraising between the UK and US, and how stepping out of your comfort zone drives rapid business growth. EPISODE HIGHLIGHTS Early Curiosity: Growing up in London, being an Arsenal fan, and taking things apart to understand how they work.> "I was always a really curious kid... that would mean breaking a lot of stuff."Manufacturing to Software: Transitioning engineering principles from physical systems to software architecture.> "I became quite obsessed with... looking at how an entire system of interdependent processes behave."Leadership & Imposter Syndrome: Early lessons leading complex projects as a fresh graduate.> "You have all the tools here... You are never going to be fully ready."The Veriom Solution: Finding structural flaws before they turn into active security incidents.> "Every tool finds what's wrong. Veriom shows you the structural why."UK vs. US Fundraising: Navigating the risk-averse UK market compared to fast-moving US opportunities.> "The UK is naturally an extremely risk-averse nation... proof points are super, super important."The RSA Decision: How staying in San Francisco led to swift investment and customer traction.> "Sometimes that's what it takes... doing something that you would naturally be uncomfortable doing."Process engineering directly applies to modern cybersecurity architecture.Market speed varies globally; strategic positioning can turn months of effort into days.Proactively fixing structural weaknesses is the next evolution beyond standard "shift-left" security."Every tool finds what's wrong. Veriom shows you the structural why.""The traction we got here would've taken us around seven months to get the same traction in the UK."CALL TO ACTION Subscribe to 909 Exec for leadership insights at the intersection of security and strategy. Visit 909cyber.com to learn about advisory services and securing organizational growth. Check out 909cyber's flagship product, www.909Shield.ai, to eliminate interview fraud and secure the helpdesk: trust the human.

    Episode 66: From Chemical Engineering to Cybersecurity: Building Veriom and Breaking Into Silicon Valley Nuria Manuel
  6. Aug 1

    Episode 65: From Big Data to Personal Safety: Doxxing, AI Risk, and Protecting People in a Data-Driven World with Rachel Vrabec

    Brought to you by 909Shield. Interview fraud is on the rise — fake candidate profiles, proxy interviews, and AI-driven scams designed to slip past your hiring team. 909Shield helps organizations keep their interview process secure end to end. Learn more at 909shield.ai. 909Exec is the executive leadership podcast from 909Cyber, hosted by founder and CEO Den Jones, whose three-plus decades in enterprise security span Adobe, Cisco, SonicWall, and Banyan Security — where cybersecurity meets business strategy. In episode 65, Den is joined by Rachel Vrabec, founder and CEO of Kanary, to discuss how personal data has become both a powerful asset and a serious liability in the age of AI. Rachel traces her path from growing up a builder in Northern Wisconsin, to strategy consulting at IBM (design strategy, SAP, early enterprise Apple Watch deployments, and IoT safety modeling across Seoul, Madrid, and Tokyo), to political data science at Civis Analytics — where she sat beside the head of security while state-funded actors targeted the company's predictive models during the 2016 election. That front-row seat to data's power and risk pushed her to found Kanary: a platform that scrapes the web to map an individual's exposure, builds threat models for doxing, impersonation, and account takeover, and automates mitigation — for individuals and for organizations including the federal DOJ, major tech companies, and highly targeted nonprofits. Den and Rachel dig into how AI accelerates both the accuracy and the danger of personal data exposure, why Kanary acts as a "personal pen tester" running popular prompts against LLMs to catch leaks, and how harmful data can be removed or aged out as models retrain. They also cover Kanary's move toward multimodal protection (images and video), why takedowns alone aren't enough, and how digital signals now plug into physical security programs. The conversation closes with Rachel's honest take on founding a startup: the pressure of hyper-growth narratives, why "getting the right people in the right seats" is the real unlock, and how to stop carrying founder regret as baggage that slows you down. What we cover: Interview fraud and how 909 Shield protects hiring Rachel's path from IBM to political data science at Civis Analytics Gender dynamics in early tech education Nation-state attacks on the 2016 election, witnessed firsthand From "big data" and neural nets to today's AI branding Why Rachel founded Kanary: data as early-warning protection, not monetization Threat models for doxing, impersonation, account takeover Kanary's work with the federal DOJ, tech leaders, and the National Network of Abortion Funds Acting as a "personal pen tester" for AI chatbots and LLMs Removing harmful data from AI models via patches and retraining Going multimodal: images and video, not just text Why removal alone isn't a strategy — pairing digital signals with physical security Limits of DIY "email every data broker" approaches Founder lessons: hiring right, rejecting hyper-growth myths, letting go of regret Guest: Rachel Vrabec, Founder & CEO of Kanary Host: Den Jones, Founder & CEO of 909 Cyber Links: 909Shield: https://909shield.ai 909Cyber: https://909cyber.com Kanary: https://www.kanary.com/ If you found value here, subscribe, rate, and share 909 Exec. #CyberSecurity #ExecutiveLeadership #AIPrivacy #Doxxing #Kanary #909Exec Chapters: 00:00 Interview fraud & 909 Shield 00:48 Intro & guest setup 02:48 Childhood & early tech exposure 10:28 Joining IBM 16:39 Civis Analytics 20:54 2016 election targeting; big data to AI 29:17 Founding Kanary 34:15 AI, LLM risk & data removal 37:14 Going multimodal & physical security 42:53 Why "delete my data" doesn't work 44:01 Founder lessons & letting go of baggage

    Episode 65: From Big Data to Personal Safety: Doxxing, AI Risk, and Protecting People in a Data-Driven World with Rachel Vrabec
  7. Jul 18

    Episode 64: Hydration as a Superpower: Zeus Kajita on Brain-First Wellness and Ki Electrolytes

    Introduction Hosted by Den Jones—founder and CEO of 909 Cyber and veteran enterprise security leader—909 Exec explores the real-life journeys and wisdom of executives shaping the business and technology world. In Episode 64, Den sits down with Zeus Kajita, the co-founder of Ki Electrolytes, to discuss his background, entrepreneurial lessons, and personal health journey. Main Topics Covered Cultural Background & Early Life: Zeus discusses growing up in the Bay Area heavily influenced by his father's Japanese heritage, which instilled a foundation of healthy eating and tea culture. He also touches on his family's deep roots in international business and travel, which led to his early experiences working overseas in Guam right after high school. Entrepreneurial Ventures & Key Lessons: Reflecting on a history of starting various businesses, Zeus frames his past failures as invaluable "outside the classroom" education. He emphasizes that choosing the right business partner is critical—attributing many past setbacks to misaligned partnerships or poor timing—and highlights his core strengths in business development, relationship-building, and establishing trust. Health Crisis & The Creation of Ki: Zeus opens up about his personal struggles during the COVID-19 pandemic, where he found himself 60 pounds overweight, tired, and depressed. This pivotal turning point prompted a return to the healthy habits of his youth and ultimately inspired him to create Ki Electrolytes.

    Episode 64: Hydration as a Superpower: Zeus Kajita on Brain-First Wellness and Ki Electrolytes
  8. Jun 21

    Episode 63: Rethinking DLP: Nightfall AI’s Rohan Sathe on Data Protection in the Age of AI Agents

    Introduction Summary Hosted by CEO Den Jones, "909 Exec" is a leadership podcast from 909 Cyber. Jones uses his 30+ years of enterprise security experience at companies like Adobe and Cisco to help executives navigate risk and transformation. Episode 63 features Nightfall AI co-founder and CEO Rohan Sathe for a deep dive into Data Loss Prevention (DLP). Main Topics Covered Entrepreneurial Journey: Sathe discusses his Silicon Valley roots and transition from the Uber Eats founding team to a cybersecurity founder. Consumer-Grade Enterprise Software: Sathe applies lessons from Uber Eats—building scalable products for low-switching-cost markets—to drive Nightfall’s enterprise product quality. Fundraising Strategy: Outlining Nightfall’s $65M total raise, Sathe emphasizes prioritizing investors who offer cybersecurity expertise and founder empathy over just capital. Flaws of Legacy DLP: After interviewing ~100 CISOs in 2018, Sathe found legacy tools were noisy, unpopular, and unsuited for modern cloud apps like Slack and Google Drive. Skepticism & Pain Points: Jones details his historical skepticism of DLP, citing lost employee productivity, high false-positive rates, blind spots, and a heavy reliance on user-driven classification. Design Principles: Nightfall aims to make DLP "invisible" to end-users unless an incident occurs. Jones relates this to his view that security should be "invisible, invincible, and inexpensive." Frictionless Architecture: Unlike SASE vendors that rely on latency-heavy network proxies, Nightfall targets optimal insertion points to eliminate user workflow delays and efficiently handle false positives. AI-Driven Risk Modeling: Replacing legacy regex rules with neural-network NLP and computer vision, Nightfall uses a comprehensive risk model evaluating identity, data lineage, and destinations to identify true incidents. Board-Level AI Concerns: As boards push for rapid AI adoption, AI data protection is now critical. This demands strict governance over autonomous agents operating at machine speed. Expanding Customers: Initially successful with tech-forward health and fintech companies, Nightfall's customer base has expanded into traditional sectors like manufacturing due to new AI security needs. Deployment & Value: Nightfall ensures rapid deployment via lightweight endpoint agents and system APIs (avoiding proxies). It integrates directly with SaaS apps and AI platforms to track prompts and agent actions. Managing Data: Nightfall tracks data movement between corporate and personal environments, including AI tools like ChatGPT. It can monitor or block personal AI usage and track file lineage to determine corporate ownership. Policy Enforcement: The platform uses customizable policies to block risky actions, present user justification prompts, and offer optional bypasses tailored to organizational philosophies. Startup Strategy & Compliance: Both agree expensive conference booths yield low ROI, favoring targeted events like dinners. Jones advises pursuing compliance primarily to unblock deals, noting it does not equate to actual security. Selling to CISOs: Acknowledging that CISOs are overwhelmed with pitches, they emphasize humility, understanding the customer's specific problems, and building long-term trust. Closing Reflections: Sathe admits he initially underestimated the importance of go-to-market strategies in cybersecurity. He warns that autonomous AI agents will permanently alter security paradigms. Jones concludes by clarifying the episode was unpaid and commending Sathe for changing his negative perception of DLP.

    Episode 63: Rethinking DLP: Nightfall AI’s Rohan Sathe on Data Protection in the Age of AI Agents

About

The 909Exec Podcast Hosted by Den Jones, CEO of 909Cyber, this podcast dives into real-world leadership with insights from top execs across industries. From startups to global giants, Den brings wit, wisdom, and his signature Scottish flair to every episode—helping you lead smarter, grow faster, and avoid the pitfalls.