— Dungeons & Dragons Masterclass Discussion
Quick recap. The Cloud Security Office Hours meeting focused on discussions about management styles and experiences, with participants sharing personal stories about their bosses and leadership challenges. The group discussed the importance of separating technical leadership from people management skills, with several members emphasizing that effective managers should be strong in both areas. Participants also shared experiences about working with contractors versus full-time employees, and the challenges of being placed in positions to succeed. The conversation concluded with participants reflecting on how good bosses provide guidance and support while allowing employees to maintain autonomy, with specific examples shared about managing technical projects and handling mistakes professionally.
Show 11 discussion topics
Dungeons & Dragons Masterclass Discussion
The meeting began with casual conversation about pets and social media influencers before transitioning to a discussion about Dungeons & Dragons. Dan shared his excitement about signing up for a Dungeons & Dragons masterclass at Chaotic Good, a gaming cafe in New York, and the group discussed the potential for future in-person or online gaming sessions together. Neil then reminded the group that today's session was an open session for introductions and discussion, encouraging new participants to introduce themselves if they wished.
Python Learning and Sprint Updates
The team discussed Python programming, with Brian Reich seeking advice on learning the language due to its whitespace sensitivity. Matt and Neil suggested using IDE tools to handle whitespace formatting and emphasized Python's utility for quick scripting tasks and its portability across platforms. D announced that the Python sprint is nearly complete, with the next sprint focusing on a long-term software project, specifically a LAN Atlas MVP, which will be open to all team members. Stryker proposed an idea for sharing anonymous stories about problematic managers from previous employers, though this was not pursued further.
JavaScript and Code Reading Insights
The meeting primarily revolved around discussions about programming languages, with a focus on JavaScript's limitations and the benefits of learning to read code, even if not writing it. Neil emphasized the value of understanding code for security engineers, sharing personal experiences of how this skill helped him at different workplaces. The group also discussed the challenges of working with custom content management systems and the importance of learning to read and understand code, even at a basic level, to better navigate technical issues.
Startup Challenges and AI Opportunities
Stryker shared his experience starting a new job at a startup, discussing the challenges of balancing short-term customer demands with long-term product strategy. He described his plans to create a comprehensive awareness training list by mapping their existing briefings to MITRE TTPs (tactics, techniques, and procedures), which would help demonstrate coverage to clients and identify gaps for content improvement. The discussion concluded with a conversation about the potential of using AI and machine learning to enhance threat intelligence and dynamic ontologies, with suggestions to explore open-source citations and collective defense approaches.
Balancing Customer Requests and Strategy
The team discussed the challenges of managing customer feature requests, particularly for startups with large customers who can influence product direction. Jay emphasized the importance of balancing customer needs with product strategy, while Neil shared his experience at Twistlock and Orca, highlighting the tension between building features for specific customers and maintaining a broader market appeal. Stryker mentioned the need to refocus on the core product and manage content team workload due to customized requests. The conversation also touched on the effectiveness of security-related content in attracting attention and the importance of making such content evergreen and applicable to a broader audience.
Team Updates and Prediction Insights
The team discussed several updates, including the resolution of a lawsuit between Wiz and Orca, who instead decided to have a champion elected through trial by combat. Jay shared his successful predictions, including Microsoft's delay of data center builds due to community zoning conflicts, bringing his prediction accuracy to 4 out of 13. The group also discussed upcoming conference presentation opportunities for 2026, with Stryker encouraging submissions. Finally, Neil reflected on the topic of challenging bosses, suggesting that the focus should be on learning from difficult work experiences rather than dwelling on negative aspects.
Leadership Styles and Honeypot Tech
The group discussed leadership styles and experiences, with Neil sharing a story about a manager who was supportive when trusted but micromanaging when confidence was lacking. They explored the importance of understanding a leader's goals and finding opportunities to build interesting work under supportive leadership. The conversation concluded with a technical discussion about low-interaction honeypots, where Matt sought recommendations for an easy-to-configure system, leading to suggestions about WordPress, Elementor theme, Shopify plugins, and the D-Shield honeypot from the Internet Storm Center.
AWS Contractor's Leadership Reflection
Alhaji shared his experience as a former AWS data center technician, where he was terminated 24 hours after dropping an SSD card during Prime Day, despite initially being reassured about the incident. He reflected on how his leadership could have been more supportive and transparent, particularly given his status as a green badge contractor approaching his 90-day mark. The discussion highlighted the importance of understanding different personalities in leadership and managing high-stress situations effectively.
Enhancing Management and Training Practices
The meeting focused on workplace experiences, particularly around management styles and training. Alhaji shared his experience of being sent into a data center without proper briefing, highlighting the lack of support for new employees. Juninho and Neil discussed the importance of proper training and support for new employees, with Juninho emphasizing the need for organizations to invest in the success of new hires. Neil also highlighted the dangers of promoting individual contributors into management roles without adequate training in people management skills.
Balancing Technical and Leadership Skills
Don shared his experience with managers who had both technical and leadership capabilities, noting that having a former peer as a manager provided valuable context and understanding of the company's products. Neil suggested breaking down management attributes into three categories: leader, manager, and administrator, and discussed how different organizations might distribute these roles among various individuals. The group discussed the importance of balancing technical expertise with people management skills, with Stryker emphasizing the need for managers to understand the technical aspects of their team's work.
Effective Leadership and Employee Support
The group discussed leadership and management styles, with Matt emphasizing the importance of empathy, honesty, and effective communication from managers. Stryker shared a personal experience where a good boss supported her by advocating when her VP tried to have her fired, demonstrating the value of leadership that protects employees. The conversation concluded with Matt describing his preference for managers who provide guidance without making him feel constrained, while still maintaining control over his work.