Episode Details

The conversation covers: 

• Josh’s role as CTO of Fugue, a leading cloud security and compliance provider for engineers. 
• The difference between cloud security and data center security — and why old school approaches to security don’t work in the cloud. 
• How engineers and security specialists can best communicate with business leaders about how to approach security, and how Fugue can help. 
• Who should be the person in charge of setting up Fugue, running reports, and communicating results across an oragnization.
• The people who tend to lose their job when a cloud security breach occurs. 
• Why cloud security requires organizational change, and how companies are adapting to prevent issues. 
• The importance of upskilling employees and making sure they have the appropriate knowledge to solve cloud challenges. 
• Why the cloud has the possibility to be more secure than a data center. Josh also talks about cloud perception, and why some are still viewing the cloud as scarier than the data center. 
• What Joshn considers to be the most effective hacking strategies for cybercriminals. 
• The relationship between security and compliance, and how organizations should approach that relationship. 
• Why there is no such thing as a perfect security posture. 

Links

• Fugue: https://www.fugue.co/ 
• Customer write-up on G2: https://www.g2.com/products/fugue/reviews/fugue-review-4269523
• Twitter: https://twitter.com/joshstella
• LinkedIn: https://www.linkedin.com/in/josh-stella-949a9711/
• Fugue Blog: https://www.fugue.co/blog
• Fugue Masterclass: https://resources.fugue.co/cloud-security-masterclass-registration
• Fugue Office Hours: https://resources.fugue.co/cloud-infrastructure-security-office-hours

Transcript

Emily: Hi everyone. I’m Emily Omier, your host, and my day job is helping companies position themselves in the cloud-native ecosystem so that their product’s value is obvious to end-users. I started this podcast because organizations embark on the cloud naive journey for business reasons, but in general, the industry doesn’t talk about them. Instead, we talk a lot about technical reasons. I’m hoping that with this podcast, we focus more on the business goals and business motivations that lead organizations to adopt cloud-native and Kubernetes. I hope you’ll join me.

Emily: Welcome to The Business of Cloud Native. I'm Emily Omier, your host, and today I'm chatting with Josh Stella. Josh, thanks so much for joining us.

Josh: Well, Emily, thanks so much for having me.

Emily: Of course. I always like to start the same. Can you just introduce yourself and your company, and tell me a little bit about what the company does, and then also what you do?

Josh: Sure. So, Fugue does cloud security for public cloud providers like AWS, and Azure, and Google. Prior to founding Fugue, I worked at AWS as a principal solutions architect primarily focused on national security; Department of Defense, and similar things. My background is I'm a programmer and I'm a software architect, and I've kind of lived between national security kinds of work and high tech in startups. And so what Fugue does is we’ll tell you all about the security posture of your cloud environments, and teach you where you have weaknesses that hackers can exploi