Suggestions
Jared Phipps
CRO @ Dazz | Unified Remediation Platform (ASPM/CTEM/DevSecOps)
Jared Phipps is a seasoned professional with over a decade of experience in cybersecurity sales and engineering, currently serving as the Chief Revenue Officer (CRO) at Dazz, a pioneer of unified remediation in ASPM/CTEM/DevSecOps.
Jared's impressive career journey includes holding key positions such as SVP at SentinelOne, specializing in autonomous endpoint protection, and serving in various capacities in renowned organizations like MITRE, US Air Force, and Radiance Technologies.
With a strong foundation in information security engineering, network security, and digital communication systems, Jared's expertise is complemented by his educational background, which includes pursuing a PhD in Technology Management from Indiana State University, an MBA in Finance from the University of Nebraska-Lincoln, and a BA/BS in Political Science, Computer Science, and Spanish from the University of Arizona.
Passionate about enabling customers to reach their security and business objectives, Jared is deeply committed to driving innovation and excellence in his field. His leadership at Dazz underscores his dedication to transforming exposure management and delivering cutting-edge solutions to clients.
Jared Phipps' illustrious career is a testament to his strategic vision, technical acumen, and unwavering commitment to security and technology.
Keywords: Cybersecurity Sales, Chief Revenue Officer, Unified Remediation, ASPM, CTEM, DevSecOps, Information Security Engineering, Network Security, Digital Communication Systems, Team Empowerment, Customer Success, Innovation, Technology Management, Finance, Political Science, Computer Science, Spanish, Leadership
Highlights
Great insights from Forrester on proactive security, which is increasingly becoming a top priority for businesses. The article highlights the three key differentiators for Dazz, making it a standout choice for companies looking to stay ahead of the curve. Check out the details here: https://lnkd.in/gk9m_yVF #proactivesecurity #cybersecurity #ForresterInsights #Dazz
Over the past two decades in cyber I have observed a few pain points which are constant realities for every organization I have worked for, or with; root cause/single source of truth, asset criticality, and contextual awareness. As organization lift and shift applications to cloud, this is magnified and often results in unhealthy Dev v. Security tension.
First, timely and succinct ‘root cause’ and ‘source of truth’ varies widely in cyber. The volume of alerts/findings/duplicative noise from our security stacks stresses our abilities to answer risk and threat questions with confidence and completeness. It’s the cyber version of “fog of war”. Few organizations are confident in their holistic management of risk exposure, and almost all organizations acknowledge gaps. Chasing / closing those gaps is an endless journey.
Second, the concept of “criticality” to prioritize risk reduction is desired but seldom fully implemented. “High Value Assets” and “everything else” is all too common. Gaining a full understanding of criticality is often a significant undertaking for teams that requires continuous hygiene to sustain. Few organizations have the time and resources to sustain this work effort.
Finally, effectively establishing criticality of assets requires us to understand the context of those organizational assets, including applications and code, especially when it pertains to new vulnerabilities being released. Is the asset exposed externally? Does the CVE just disclosed have a POC or active exploits against? What’s the business impact to this system being compromised with degraded service or complete outage? Where, definitively, do I need to go to remediate the vulnerability in the application architecture?
The shift to cloud is further compounding the issue. It has left a fragmented view of security... let’s be honest, for most organizations lift and shift will never be 100%. A rush to solve “shift left” has its own challenges. Yet most are still related to those three core issues. And those issues still exist for the self-hosted assets that never moved to the cloud.
Procedurally, CISA has started to tackle this with SSVC framework. As for the technical solution... Dazz has tackled this challenge head on. After wrapping my first full week at Dazz, I can confidently say that exciting times are ahead. There is finally industry movement to fundamentally change our thinking and approach to organizational posture, understand it in terms of contextualized business risk, and streamline remediation workflows with SLAs that align with the business needs and risk profiles.
Merav Bahat, Tomer Schwartz and Yuval Ofir, I'm excited to join you in your quest to change this industry. Stephen Ward, Asheem Chandna, Gili Raanan, Shardul Shah thanks for the trust!
