Issue 47  June 4th 2024

Chapter Member Interview by Bryon Singh: Brian Turcotte

Bryon: Tell me about yourself?

Brian T: I graduated from The College of New Jersey in 2002 with a degree in computer science. I began my career at the NJ Highway Authority (now NJ Turnpike Authority) as a Windows System Administrator and have worked there ever since. For the past seven years, I have managed the operating system services team, overseeing Windows, Linux/Unix, and cybersecurity. My interest in cybersecurity developed around 2018, and I actively pursue learning opportunities in this field. I currently hold several security certifications, including ISC2 CC, CompTIA Security+, CompTIA CySA+, Microsoft Certified: Security Operations Analyst Associate, and Microsoft Certified: Cybersecurity Architect Expert.On a personal note, I've been married for 11 years and have two children. I am also a dedicated volunteer firefighter with 26 years of service at the Hopelawn Engine Company.

Bryon: How do you stay updated with the rapidly evolving cybersecurity landscape, and what strategies do you employ to adapt to new challenges?

Brian T: I follow several information sources, including Reddit groups, newsletters, and memberships in organizations like Infragard, CISecurity, and NJCCIC. When new challenges arise, I focus on understanding their impact on our environment and assess how to best protect ourselves using existing tools, new hunting rules, policy changes, or software patches.

Bryon: What recent trend in cybersecurity do you believe is significantly impacting the industry, and how are you responding to it in your current role?

Brian T: AI is a major concern, as adversaries can use it to craft sophisticated attacks, including phishing emails that are difficult to distinguish from legitimate ones. To address this, we provide employee training on identifying malicious emails and conduct regular phishing tests.

Bryon: Can you share an experience where you had to educate non-technical staff on cybersecurity practices, and what approach did you find most effective?

Brian T: I regularly educate non-technical staff on cybersecurity practices. To illustrate the importance of security measures, I find sharing examples of organizational attacks and their impact to be effective.

Bryon: What's the most complex cyber threat you've encountered, and what steps did you take to mitigate it? What lessons were learned?

Brian T: One complex threat involved a malicious email campaign. Despite email protection, some emails with a harmful link slipped through. We identified affected users, monitored their accounts, and forced password resets. This experience highlighted the importance of quick response to security alerts and having a playbook for future incidents.

Bryon: What tips can you give cyber professionals to survive in this field?

Brian T: Never stop learning and embrace diverse skillsets. Understand attack surfaces and effective defenses. Stay current with industry trends through social media, newsletters, and webcasts.

linkedin.com  

JuMPstart Mentorship Program

Dear Members,

The JuMP Mentorship Program has recently implemented a new software solution designed to enhance the mentor-mentee experience. This tool aims to improve collaboration and progress tracking, which we are confident will bring our interactions to new heights. We are excited to be sharing more details soon as we are preparing for a full launch this month.

Get Involved:
Don't miss out on the opportunity to shape our program. Join our dynamic roster by signing up here or reach out with your thoughts at mentoring@isc2chapternj.org. Thank you for your continued support and engagement. Together, we're not just enhancing skills but also building a resilient and inclusive cybersecurity community.

Warm regards,

Matthew Lang and The Mentorship Committee

google.com