[00:05.330 --> 00:10.450]  So here we are at the end of the first day of the Career Hacking Village and I hope everyone has
[00:10.450 --> 00:17.530]  had a great time. We were so thankful that one of our partners came up with this idea about looking
[00:17.530 --> 00:24.610]  at what the future of the workforce would be about and how we can future-proof our careers.
[00:24.610 --> 00:30.770]  We're definitely in a time of a lot of change and a lot of uncertainty and it is always good
[00:30.770 --> 00:35.790]  to be thinking about what are the next steps and what can we be doing now to think about
[00:35.790 --> 00:42.250]  future-proofing our career. I'd like to introduce Janai Marikovic and she has some great thoughts
[00:42.250 --> 00:48.050]  for us to think about. Janai? Hi Kathleen, thank you very much. I really appreciate you giving me
[00:48.050 --> 00:54.510]  the opportunity to talk about a topic that is near and dear to my heart. The title of today's lecture
[00:54.510 --> 00:59.510]  is Future-proofing Your Career in the Age of the Intelligent Ecosystem and some of the skills that
[00:59.510 --> 01:05.250]  we're going to need to build up this what we'll call an augmented workforce from the ground up.
[01:05.330 --> 01:11.010]  Just a little bit of background about myself. I'm a Chief Information Security and Chief
[01:11.010 --> 01:16.670]  Technology Officer for a company called Tyro Security. I've been doing cyber security for
[01:17.270 --> 01:24.870]  20 years now and I've been a CISO for the last seven or eight. I've worked in a multitude of
[01:24.870 --> 01:32.090]  different industries including media, entertainment, live sports, gaming. I've also worked in manufacturing,
[01:32.090 --> 01:40.350]  healthcare, and robotics. I've got some extensive experience building cyber security
[01:40.350 --> 01:46.230]  capabilities from the ground up. So everything from security, architecture, engineering, forensics,
[01:46.230 --> 01:51.890]  and defense. I actually also had the opportunity to invent a cyber defense framework based on
[01:51.890 --> 01:58.090]  American football. And I've worked for companies such as DirecTV, Electronic Arts, Beckman Coulter,
[01:58.090 --> 02:11.020]  and investigation firms like Kralogera. So we are in what's called the fourth industrial revolution
[02:11.020 --> 02:18.120]  and really what that is is it's this time marked by an interconnection of the physical, the biological,
[02:18.120 --> 02:23.960]  and the digital worlds. And when these worlds integrate the way that they are today, it gives
[02:23.960 --> 02:30.700]  rise to what we call big bang disruptions and ultimately transform entire systems.
[02:33.340 --> 02:37.500]  The accompanying pace of technological development is going to be exerting this
[02:37.500 --> 02:43.080]  profound change in the way that we live, the way that we work. It's going to impact all disciplines,
[02:43.080 --> 02:53.600]  all economies, and all industries. So when these worlds mesh, you end up with what's called
[02:53.600 --> 03:00.140]  distributed thinking. And that's where if everything is hyper-instrumented with sensors,
[03:00.140 --> 03:05.500]  and these sensors have things like onboard artificial intelligence, and again they're
[03:05.500 --> 03:10.680]  crossing multiple worlds, the digital, the biological, and the physical world, you end
[03:10.680 --> 03:20.790]  up giving rise to this thing called distributed thinking. So what is an intelligent ecosystem?
[03:20.790 --> 03:27.550]  It's heavily instrumented sensor networks that are integrated across this mesh of all three worlds,
[03:27.550 --> 03:34.070]  so the digital, the biological, and bio networks. And it's accessible via natural user interfaces,
[03:34.070 --> 03:39.750]  so think voice, gesture, and they leverage cognitive systems that ultimately make these
[03:39.750 --> 03:46.990]  real-time decisions at the sensor level. And this all occurs across blockchain-enabled networks.
[03:47.710 --> 03:51.830]  And so with all of this, at the end of the day, all roads ultimately, you know,
[03:51.830 --> 04:00.070]  lead through cybersecurity. And we have our work cut out for us. Attackers are better at adapting to,
[04:00.070 --> 04:06.350]  leveraging, and exploiting disruption. We operate in a world bound by rules. Their limits,
[04:06.350 --> 04:12.190]  quite frankly, are their own creativity. And our ability to predict and prepare is more critical
[04:12.190 --> 04:18.090]  than ever to deeply understand the forecasts and the trends that'll mold and shape the world
[04:18.090 --> 04:24.010]  of tomorrow. So as cybersecurity professionals, quite frankly, we don't often fully understand
[04:24.010 --> 04:29.210]  how these near and long-term technology trends culminate. We don't think, like world builders,
[04:29.210 --> 04:35.150]  we don't think in universes. And as a result, we end up with these disjointed, unnatural approaches
[04:35.150 --> 04:42.590]  to cybersecurity design, from everything from the cybersecurity worker's user experience to these
[04:42.590 --> 04:47.150]  slow, debt-laden, and friction-laden enterprise security architectures.
[04:50.530 --> 04:56.790]  So designing for cybersecurity of the future requires a willingness for us to explore how
[04:56.790 --> 05:01.390]  these technical trends are going to manifest into this future world. And so what are some of the
[05:01.390 --> 05:06.210]  iterative steps that we can take that will help us both operate in this world comprised of
[05:06.210 --> 05:16.100]  intelligent ecosystems and how to protect and defend it? And since user-centric design starts
[05:16.100 --> 05:22.400]  with the user, it's time that we consider the cybersecurity professional and our user experience
[05:22.400 --> 05:29.640]  first. So there's this wonderful quote from Accenture, and it's, in the future, people don't
[05:29.640 --> 05:34.670]  want more technology in our products and services. We actually want technology that is more human.
[05:34.670 --> 05:41.970]  And technology-driven interactions are creating and expanding technology identity for the consumer.
[05:41.970 --> 05:46.990]  And this living foundation of knowledge will be key not only to us understanding the next
[05:46.990 --> 05:52.510]  generation consumers and, quite frankly, security users, but delivering these rich,
[05:52.510 --> 05:59.470]  individualized experiences based on relationships in this post-digital age.
[06:00.030 --> 06:05.130]  One of the quotes that I like is from Steve Jobs, and he was at a conference called D5,
[06:05.130 --> 06:10.830]  and he said, I just want Star Trek, give me Star Trek. And why is that? Well, it's because technology
[06:10.830 --> 06:16.650]  experiences in Star Trek are natural and oftentimes invisible and transparent. Tech is built into the
[06:16.650 --> 06:23.750]  fabric of the ecosystem. And the ultimate trajectory is building these humanized technologies,
[06:23.750 --> 06:29.590]  ecosystems that sense, that feel, that think, intelligent ecosystems. But to engage in predicting
[06:29.590 --> 06:35.890]  the future, we need to take a look at how all of this is ultimately going to impact us.
[06:36.930 --> 06:43.050]  And so these next generation security systems are going to leverage human-centered designs that
[06:43.050 --> 06:49.210]  intersect with empathy and creativity, with consideration for us as the end user.
[06:49.210 --> 06:54.630]  They're going to be accessed via these deeply personalized and anticipatory interfaces using,
[06:54.630 --> 06:57.910]  like I mentioned before, natural language and voice.
[07:00.250 --> 07:06.670]  And they are going to culminate into these role-based and purpose-based digital assistants
[07:06.670 --> 07:11.610]  that are ultimately going to help us navigate employees through decision-making processes
[07:12.170 --> 07:16.250]  and the explosion of data in these intelligent ecosystems.
[07:17.450 --> 07:25.050]  And so as the AI and the cognitive solutions evolve in sophistication, you know, technology,
[07:25.050 --> 07:30.150]  we too as cybersecurity professionals, we've got to figure out how ultimately that's going to affect
[07:30.150 --> 07:35.710]  our jobs. How is it going to affect our work? What is, what's our work going to look like in
[07:35.710 --> 07:41.030]  the future when the majority of our workload is automated? What are the skills that are necessary
[07:41.030 --> 07:46.610]  to operate in these blended worlds where security professionals are working alongside assistants or
[07:46.610 --> 07:55.610]  robotics? So we're going to have to learn how to operate faster. We're going to have to be capable
[07:55.610 --> 08:01.830]  of applying new skill sets rapidly. There's going to be a change in the way that we deal with our
[08:01.830 --> 08:07.850]  skills and we're going to have to learn, you know, a set of skills that place higher value on our
[08:07.850 --> 08:12.530]  people skills, our business intelligence, our independent thinking, innovation, and especially
[08:12.530 --> 08:20.890]  around creativity. So building the next generation security worker. So in this next section, we're
[08:20.890 --> 08:28.310]  going to talk about some of the six sets of skills that I kind of wanted to delve into. I'm sure
[08:28.310 --> 08:35.310]  through many other lectures, we've talked about, you know, traditional cybersecurity skills that
[08:35.310 --> 08:40.910]  you need in order to move on to your next role or even some of the human skills such as
[08:41.490 --> 08:46.810]  presentation and empathy and so forth. I wanted to take a little bit of a different tack
[08:46.810 --> 08:51.590]  and focus in on skills that I believe security people are going to need
[08:52.070 --> 08:57.670]  if you're operating in a world where much of our work has already been automated away.
[08:59.430 --> 09:06.230]  So I broke the skills into two different areas. One are STEM skills and the other one is what
[09:06.230 --> 09:13.070]  we'll call human skills. So the first one is artificial intelligence. So this is very
[09:13.070 --> 09:18.650]  meaningful to me. In fact, I felt so strongly about this when I was working at a design firm
[09:18.650 --> 09:26.130]  as their CTO. We designed a set of artificial intelligence training for everybody in the company.
[09:26.130 --> 09:29.830]  As cybersecurity professionals, we're dealing with a couple of things here.
[09:29.830 --> 09:36.150]  One, you're expected to protect and defend systems that have machine learning built into them.
[09:36.150 --> 09:44.370]  So from the security architecture and design phase, to the way that we instrument and monitor
[09:45.550 --> 09:49.570]  attacks against systems that have machine learning built into them,
[09:49.570 --> 09:53.470]  to the way that you do digital forensics within these systems.
[09:53.470 --> 09:59.270]  You have to have a foundational knowledge and understanding of AI in order to be able to do
[09:59.270 --> 10:05.630]  your future job. But the other is that with the augmented workforce, you're working alongside
[10:05.630 --> 10:11.590]  digital assistants. We already see this in industries such as supply chain and customer care,
[10:11.590 --> 10:18.310]  where people have digital assistants, or in some cases robotics, that are working alongside and
[10:18.310 --> 10:24.070]  taking over a lot of the day-to-day activities that they, quite frankly, are able to do through
[10:24.070 --> 10:31.570]  automation. So in building and designing these systems, it's really key and critical for security
[10:31.570 --> 10:40.570]  users to understand AI, not just from a basic level, but I would say ultimately through a mid-level.
[10:42.890 --> 10:49.590]  The next are biological systems. So we already mentioned earlier that there's this intersection
[10:49.590 --> 10:54.710]  between the physical, the digital, and the biological worlds, everything that comprises
[10:54.710 --> 11:00.730]  the fourth industrial revolution. And so we're going to be working in worlds where you're expected
[11:00.730 --> 11:07.990]  to design the cybersecurity controls and embedded biological devices. So example,
[11:07.990 --> 11:13.950]  think of embedded medical tattoos. Think of ingestible robots as an example,
[11:13.950 --> 11:18.950]  medications that have like nanobots and so forth that are built into it. And we're going to be
[11:18.950 --> 11:24.610]  expected to design the security into those and to other bio interfaces and to wearables.
[11:24.630 --> 11:30.790]  And so understanding that if those systems get compromised, what is going to, what can be the
[11:30.790 --> 11:36.930]  impact to the human is going to be key. But it's actually a little bit more than that. You know,
[11:36.930 --> 11:42.850]  the world's been around for what four and a half billion years and biological systems have had the
[11:42.850 --> 11:48.750]  chance to evolve. And I already mentioned earlier that we oftentimes as security people don't think
[11:48.750 --> 11:57.110]  in ecosystems, we don't think in world building. And so if we want insight, if you want create,
[11:57.110 --> 12:04.210]  you know, insight into the way that you can approach building security holistically,
[12:04.210 --> 12:09.570]  you can look at biological systems. A couple of examples, the human immune system. There
[12:09.570 --> 12:15.230]  are several books out there that talk about human immune system architecture. And when we look at
[12:15.230 --> 12:20.930]  the way that we design security systems, we oftentimes don't do it very holistically.
[12:20.930 --> 12:26.730]  And so if you look at the construction of a human immune system and you correlate that,
[12:26.730 --> 12:32.250]  there's a lot of insight that you can get from there. A couple of quick examples are,
[12:32.250 --> 12:37.550]  it's frictionless and transparent. When your immune system goes off, it's because there's
[12:37.550 --> 12:43.050]  something bad that's happening. You don't wake up in the morning thinking about your immune system.
[12:43.050 --> 12:51.670]  Yet, those are the actions that we expect of end users when we design security systems for them.
[12:51.730 --> 12:58.010]  So, you know, the future design of cybersecurity systems needs to be, you know, more transparent
[12:58.010 --> 13:03.730]  and a lot less friction, you know, to the end user. There's insight into biological systems
[13:03.730 --> 13:08.790]  in terms of the way that animals communicate with each other. And you can take insight from there.
[13:08.790 --> 13:15.330]  There's, you know, just when you look at everything from ecosystem, terrestrial ecosystem design,
[13:15.330 --> 13:19.830]  you can take inspiration from that in terms of the way that you approach the design of
[13:19.830 --> 13:26.850]  cybersecurity. So both because we're going to be operating and designing cybersecurity into
[13:26.850 --> 13:33.810]  biological systems, and because there is insight that can be gained from biological systems,
[13:33.810 --> 13:39.950]  I highly recommend becoming more competent in biological systems is a skill that
[13:39.950 --> 13:49.630]  we're going to see cybersecurity people need to do. User experience design. So I talked a little
[13:49.630 --> 13:54.990]  bit earlier about what does the design currently, what does the user experience look like for a
[13:54.990 --> 14:00.390]  cybersecurity professional? We've all experienced it. It doesn't matter what your role is, you're
[14:00.390 --> 14:07.310]  in it at 100 applications plus. The context switching that we have to do is astronomical.
[14:08.230 --> 14:14.010]  It adds a lot of friction to the process. It adds a lot of time to the process. And when you're
[14:14.010 --> 14:20.270]  dealing with attacks that, you know, operate rapidly, and again, attacks that can cross
[14:20.270 --> 14:26.930]  multiple worlds, then time is absolutely of the essence. And yet, and still, when we look at the
[14:26.930 --> 14:32.910]  way that security architectures are designed for us as end users, they're problematic.
[14:33.210 --> 14:37.830]  Oftentimes, you have to click through multiple screens in order to be able to get anything done.
[14:37.830 --> 14:45.090]  They are not designed with the care that you design, you know, interfaces for, say, for
[14:45.090 --> 14:51.270]  consumers. And so, since the future of our applications are going to have these voice
[14:51.270 --> 14:58.710]  interfaces, these digital assistants built into it, we as security professionals understanding
[14:58.710 --> 15:06.070]  how to design user experiences is important to us. But it's also important to end users.
[15:06.070 --> 15:12.690]  When we think about what we ask of end users, you know, we don't oftentimes understand, you know, the
[15:12.690 --> 15:18.170]  full experience that they have as part of their journey. And the things that we're asking them to
[15:18.170 --> 15:25.190]  do as part of their day-to-day activities, or within the applications themselves, don't oftentimes
[15:25.190 --> 15:32.950]  follow the best user experience for that individual. And so, understanding how to do UX
[15:32.950 --> 15:39.650]  or user experience design, understanding how to map out user journeys and build security into them,
[15:39.650 --> 15:49.690]  I think it's going to be an absolute key experience. Creativity and design. So,
[15:49.690 --> 15:58.170]  creativity is still one of those skills that humans outperform machines. And so,
[15:58.170 --> 16:04.630]  our ability to think outside of the box, our ability to apply creative processes to things
[16:04.630 --> 16:08.950]  are going to be critical, especially in the world of cybersecurity. We're going to see
[16:08.950 --> 16:14.670]  attacks, and we're going to see breaches, unlike anything we've seen in the past. Which means that
[16:14.670 --> 16:21.290]  we're going to have to leverage different types of experiences and different ways of doing things,
[16:21.290 --> 16:27.990]  far different than anything that we've done in the past. And so, a proper education and training in
[16:27.990 --> 16:33.850]  the world of design, and a proper education and training in the world of creativity and things
[16:33.850 --> 16:40.450]  like design thinking, I think are skills that we're going to have to see not only in STEM careers,
[16:40.450 --> 16:46.450]  but definitely in the world of cybersecurity. We've already mentioned that attackers are really
[16:47.130 --> 16:52.310]  bound only by the limits of their creativity, which means that we need to meet creativity
[16:52.310 --> 17:02.760]  with creativity. Storytelling. One of the key things that we're going to have to build
[17:02.760 --> 17:09.500]  as a workforce is our ability to communicate. Security people are oftentimes very good
[17:09.500 --> 17:15.300]  at communicating with other technical people. But when we get outside of the technical realm,
[17:15.300 --> 17:21.500]  and we start interfacing with our colleagues, when we interface with users, when we interface
[17:21.500 --> 17:28.220]  with our management, when we interface with the board of directors, we think we are communicating
[17:28.220 --> 17:35.020]  one way. Unfortunately, our audience is interpreting it a very different way.
[17:35.120 --> 17:42.280]  And so, understanding how to storytell is going to be one of the key skills in terms
[17:42.280 --> 17:49.020]  of communication and persuasion, quite frankly. Negotiation skills are predicated also on your
[17:49.020 --> 17:54.960]  ability to storytell. Humans have been storytelling as a way to communicate information since the
[17:54.960 --> 18:03.440]  beginning of time. And being able to reach into some of those ancient skills that we have.
[18:03.440 --> 18:09.300]  And understand how to communicate these very difficult topics using mechanisms such as
[18:09.300 --> 18:15.520]  storytelling. And understanding things like the hormones behind storytelling. The way that you
[18:15.520 --> 18:22.600]  tell specific stories in order to elicit certain reactions that actually have hormonal responses.
[18:22.600 --> 18:31.600]  And get the person to either feel like there's a call to action or have empathy with you as the
[18:31.600 --> 18:38.680]  storyteller. All of that is predicated on our ability to be able to tell a good story. So,
[18:38.680 --> 18:44.600]  storytelling is absolutely one of the key skills that we're going to have to build.
[18:46.140 --> 18:55.120]  And empathy. So, empathy is I think oftentimes an underrated skill. And it's because we oftentimes
[18:55.120 --> 19:02.060]  believe that you have it or you don't. And being able to build a bond with our users. In fact,
[19:02.060 --> 19:10.260]  key to storytelling is our ability to be empathic. And so, if we're expecting our users,
[19:10.260 --> 19:18.460]  our colleagues, if we're expecting management to understand what we're trying to communicate,
[19:18.460 --> 19:24.760]  then we also have to be able to look at the world through their eyes. We need to look at the world
[19:24.760 --> 19:31.460]  through the lens of where they're coming from. If we're trying to do proper user experience design,
[19:31.460 --> 19:38.200]  that is predicated on empathy. If you're trying to do creative design, it is predicated on empathy.
[19:38.690 --> 19:44.100]  So, everything that we do in the world of cybersecurity when we're trying to communicate
[19:44.100 --> 19:52.060]  out and get people to align with us or take specific actions is our understanding of how to
[19:52.060 --> 19:59.180]  look at the world through their lens unbiased. And work through designing solutions that ultimately
[19:59.720 --> 20:08.680]  allow all of us to be able to work together. So, I wanted to end on this. And that's a call
[20:08.680 --> 20:17.320]  to action. One of the, you know, as security professionals, you know, one of the things that
[20:17.320 --> 20:26.620]  we really need to focus on is demanding oftentimes that the industry as a whole start looking at
[20:26.620 --> 20:34.180]  security experience design end to end and holistically. So, everything from the way that
[20:34.180 --> 20:40.220]  we interface with applications so that when you're instead of having to interface with 100
[20:40.220 --> 20:47.000]  different applications, you're working with digital assistants that are capable of automating a lot
[20:47.000 --> 20:52.680]  of the work and then representing the information to us in a way that makes in a way that ultimately
[20:52.680 --> 21:00.960]  makes sense and makes our jobs easier is absolutely key. Expecting the people who design for us to
[21:00.960 --> 21:06.380]  start thinking about, you know, our lives holistically end to end and not just trying
[21:06.380 --> 21:11.300]  to solve this one problem with this one piece of technology, but understanding the stressors that
[21:11.300 --> 21:17.580]  security people deal with and, you know, what their lives look like in the context of trying to
[21:17.580 --> 21:24.980]  do this work is absolutely key. And so, I wanted to have a call to action that we demand more from
[21:24.980 --> 21:29.800]  our vendors. That when they're designing for us, that they design as if they're designing for
[21:30.020 --> 21:35.400]  a consumer. So, when we look at things like digital assistants and the way that digital
[21:35.400 --> 21:41.980]  assistants have been built for consumers, why that type of experience can't be built for cyber
[21:41.980 --> 21:51.160]  security needs to stop. We need to start demanding that proper UX design, that, you know, things like
[21:51.160 --> 21:58.780]  natural user interfaces, that futuristic technology gets embedded into our user experience so that at
[21:58.780 --> 22:05.560]  end of the day, you know, we're able to deliver the protection and defense services to our,
[22:05.560 --> 22:10.740]  you know, to our companies and to the people that we're responsible for protecting.
[22:10.740 --> 22:16.800]  And I wanted to thank you for giving me the opportunity to talk about, you know,
[22:16.800 --> 22:23.920]  intelligent ecosystems, some of the human and STEM-based skills that I'd like to predict that
[22:23.920 --> 22:30.060]  we're going to need in order to operate in this future world. And thank you very much and enjoy
[22:30.060 --> 22:31.560]  the rest of the conference.
[22:32.060 --> 22:35.740]  Janine, thank you so much. That was really inspiring and sort of
[22:35.740 --> 22:43.760]  really turning our heads around as far as, you know, we tend to push a lot as far as you need
[22:43.760 --> 22:49.780]  this certification, you need to know this language, you need to know, you know, sort of hard science
[22:49.780 --> 22:55.460]  kind of skills. And some of the things that we've been talking about over the last year or so has
[22:55.460 --> 23:01.040]  been the skills that people learn when they're volunteering in conferences, learning how to
[23:01.040 --> 23:08.560]  better communicate, learning how to be empathetic and the way you are practicing your empathy is by
[23:08.560 --> 23:14.920]  being a volunteer and dealing with people from different cultures and different backgrounds and
[23:14.920 --> 23:21.720]  understanding that you do have the capacity to be empathetic. You just need to learn how to
[23:21.720 --> 23:29.320]  use it and constantly practice it. So these are really great, great pieces of information. I know
[23:29.500 --> 23:35.180]  a lot of people will be talking to our career coaches over, you know, today and tomorrow. And
[23:35.180 --> 23:41.460]  I think that this is something that we can really touch on as far as what are the other skills that
[23:41.460 --> 23:46.840]  everyone should be looking at as they develop their career. So thank you so much for this and
[23:46.840 --> 23:53.220]  everyone have a great evening and we will see you all tomorrow at the Career Hacking Village.
[23:53.220 --> 23:54.740]  Thank you. Thank you.