Evolving the SOC: Automating Manual Work while Maintaining Quality at Scale – Tim MalcomVetter – ESW #394
We've got a few compelling topics to discuss within SecOps today. First, Tim insists it's possible to automate a large amount of SecOps work, without the use of generative AI. Not only that, but he intends to back it up by tracking the quality of this automated work with an ISO standard unknown to cybersecurity.
I've often found useful lessons and wisdom outside security, so I get excited when someone borrows from another, more mature industry to help solve problems in cyber. In this case, we'll be talking about Acceptable Quality Limits (AQL), an ISO standard quality assurance framework that's never been used in cyber.
Segment Resources:
Announcements
Security Weekly listeners save $100 on their RSA Conference 2025 Full Conference Pass! RSA Conference will take place April 28 to May 1 in San Francisco and on demand. To register using our discount code, please visit securityweekly.com/rsac25 and use the code 5U5SECWEEKLY! We hope to see you there!
Guest
Tim MalcomVetter (@malcomvetter) is the Co-Founder of ⚡Wirespeed, a 100% Automated and SaaS-based MDR that is faster, more consistent, easier to use, and significantly cheaper than the legacy MDR approaches. We’re changing your relationship with MDR!
Tim has been building, defending, and hacking computer systems since the 1980s as a kid. Tim’s accomplishments include:
– startup exit to a world leading private equity firm
– scaling a security business to 300% growth in a little over a year
– building the Red Team program at the world’s largest company
– advising and consulting startups, enterprises, and mergers & acquisitions
– leading high performing teams
– hacking everything from mainframes to apps to AI
– holding an academic university cybersecurity research fellowship
– presenting at numerous technical conferences
– contributing to open source software and frameworks like MITRE ATT&CK