Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Tines' Field CISO Matt Muller on security's communications problem and the future of the SOC

In this week’s episode of The Future of Security Operations podcast, I'm joined by Matt Muller, Field CISO here at Tines. With over a decade of experience at companies like Material Security, Coinbase, and Inflection, Matt’s got a strong track record of scaling SecOps teams, building threat detection and mitigation programs, and driving trust and safety initiatives. His knowledge impressed the Tines team so much that we invited him to join the team as our first Field CISO. Matt and I discuss.

RegScale's Travis Howerton on taking the pain out of compliance in highly-regulated industries

In this week’s episode of The Future of Security Operations podcast, I'm joined by Travis Howerton, Co-founder and CEO of RegScale. Travis began his security career with roles at government and regulated organizations, including the National Nuclear Security Administration and Oak Ridge National Laboratory, before being inspired by inefficiencies in compliance processes to co-found RegScale.

Introducing Modern SecOps, a more realistic alternative to the "autonomous SOC"

I’ve always had a love-hate relationship with traditional SOC. Many SOC teams do great work within this structure. But there are also serious issues with the three-tier model - it’s rigid, costly, and unsustainable for any company that isn’t a large enterprise. In the push to address these limitations, the concept of an “autonomous SOC” has emerged, with some vendors already claiming to offer fully autonomous solutions.

Four common misconceptions about using AI in security operations

At this stage in AI's evolution, we’ve all heard the big promises - and overpromises - from vendors. But what about the people on the front lines of security operations? How are real practitioners feeling about using AI in their day-to-day work? In a recent webinar with guest speaker Allie Mellen, Principal Analyst at Forrester Research, we dug into how AI is actually being adopted in the SOC - what’s working, what’s not, and what's getting lost in the noise.

The top seven skills security analysts need to succeed, according to security leaders

According to the U.S. Bureau of Labor Statistics, demand for security analysts is expected to grow by more than 30% over the next decade, far outpacing the average for other roles. That’s good news for those entering or advancing in the field. But with heavy workloads and constant pressure to keep up with evolving threats, professional development can easily fall by the wayside. So how can security analysts stand out to hiring managers — and make sure their career path stays on track?

From backlog to breakthrough: enhancing IT service delivery and support with automation

Scaling IT operations was never going to be easy. By 2025, it was fair to expect that technology would ease classic challenges like high workloads, rising operational costs, and end-user friction. Yet IT leaders still face mounting pressure across identity and access management (IAM), endpoint management, request fulfillment, and incident response. Today’s end users are more demanding. IT operations are more complex. And time is in short supply.

What's new in Tines: April 2025 edition

Workbench offers many powerful capabilities, and with it, we believe you should be able to use any of your tools with their custom configurations. So, we decided private templates should be available for Workbench conversations. And the ability to take control of Tines AI features doesn’t stop there: Read more on private templates →

GitLab's CISO Josh Lemos on the pros and cons of making security practices public

In this week’s episode of The Future of Security Operations podcast, I'm joined by Josh Lemos, CISO at GitLab. Throughout his 15-year career in security, Josh has led teams at ServiceNow, Cylance, and Square. Known for his expertise in AI-driven security strategies, Josh is also a board member with HiddenLayer. He drives innovation at GitLab with a relentless focus on offensive security, identity management, and automation. Josh and I discuss.

The end of muckwork

Muckwork is the invisible drag on every company. It’s the repetitive, manual, low-leverage work we tolerate because we assume it’s necessary. Copying data between systems. Triaging alerts. Clicking through approvals. Tasks that keep things running but slow everything down. In 2006, Jeff Bezos called the backend plumbing of web apps “muck.” AWS was created to eliminate it. Today, the same kind of work is everywhere in the enterprise. We call it muckwork.