Cloud Security Podcast· Staffel 6· Folge 35
Your SecOps Team Can't Save Your Cloud: A New Blueprint for Security.
Mittwoch, 27. August 2025 · 47 min
Kapitelklicken springt direkt hin
Shownotes
The conversation around cloud security is maturing beyond simple threat detection. As the industry grapples with alert fatigue, we explore the necessary shift from a reactive to a proactive security posture, questioning if a traditional SecOps model is sufficient for modern cloud environments.
We spoke with Gil Geron (linkedin.com/in/gilgeron), CEO of Orca Security (orca.security), to examine the limitations of a SecOps-centric defense. SecOps teams are inherently reactive, they cannot be the sole guardians of cloud infrastructure. Instead, the conversation centers on a new blueprint: viewing cloud security as an end-to-end workflow that integrates development, deployment, and production runtime with a continuous feedback loop into policy.
The role of AI is also explored, not just as a threat, but as an opportunity to empower security teams and make knowledge more accessible. We spoke about the power of context in reducing alert volume, citing a case where millions of vulnerabilities were prioritized down to a handful of actionable fixes.
Guest Socials - Gil's Linkedin (linkedin.com/in/gilgeron)
Podcast Twitter - @CloudSecPod (twitter.com/cloudsecpod) (twitter.com/CloudSecureNews)
If you want to watch videos of this LIVE STREAMED episode and past episodes - Check out our other Cloud Security Social Channels:
-Cloud Security Podcast- Youtube (youtube.com/c/CloudSecurityPodcast?sub_confirm…)
- Cloud Security Newsletter (cloudsecuritynewsletter.com)
- Cloud Security BootCamp (cloudsecuritybootcamp.com)
If you are interested in AI Cybersecurity, you can check out our sister podcast - AI Cybersecurity Podcast (open.spotify.com/show/3nV4eijfzdHKIvDOaycVII)
Questions asked:
() Introduction() Who is Gil Geron? From Check Point to CEO of Orca Security() What is Cloud Security in 2025? The Evolution to a Modern Workflow() How AI is Impacting the Cloud Security Landscape: A Salvation, Not a Risk() The Limits of a Reactive Approach: Why SecOps Can't Be Your Only Defense() The Surprising Truth: 95% of Cloud Malware is Introduced, Not Hacked() The Role of Identity in Cloud Security: The New Networking() The Current Cloud Security Landscape: From "Thumb Mistakes" to Neglected Assets() How CISOs are Modernizing Security by Modernizing Engineering Workflows() Reducing SOC Fatigue: How Context Turns Millions of Alerts into a Handful of Fixes() Is Auto-Remediation Safe? Why It's an Orchestration Challenge, Not a Technical One() Shifting Left with Production Context: The Future of AppSec & Cloud Sec() How to Choose a Security Vendor: Finding Hope, Not Fear() Final Questions: Hiking, Team Pride, and French Fries
Thank you to our episode sponsor - Orca Security (orca.security)
