Gary Hunter, Head of Security Operations at Trustpilot, built a security team from scratch at a company synonymous with trust. Gary shares how his ten-person team leverages AI agents across alert triage, multimodal brand protection, and incident response.
He explores why he and his team treat AI agents like interns with codified guardrails, why competitive prompt testing reveals the best approaches, and how restricting AI to specific documentation sets prevents confusion. Gary also offers his tips on building weatherproof team members who adapt to any technology shift and reflects on why constraints breed creativity in resource-limited environments.
Topics discussed:
- Building security operations from scratch by identifying pain points, understanding technology gaps, and systematically increasing detection coverage and visibility
- Leveraging AI agents for alert triage and workflows to enable teams to run as fast as attackers while maintaining appropriate human oversight
- Implementing competitive prompt testing by running multiple AI models to identify the most effective approach before deployment
- Creating cultural buy-in for AI adoption by empowering team members to contribute prompts and democratizing learning across skill levels
- Using AI for multimodal brand protection, analyzing screenshots and HTML content to score potential infringements and automate response workflows appropriately
- Treating AI agents like interns, codifying processes, and limiting tool access based on what you'd delegate to junior team members
- Building detection strategies that focus on behaviors and crown jewels while using AI to triage noisy but potentially valuable alerts
- Documenting institutional knowledge concisely rather than overwhelming AI models with extensive documentation that creates conflicting or irrelevant responses
- Shifting team focus from alert triaging to high-impact prevention work, vendor management, and building relationships across the business
Listen to more episodes:
Apple
Spotify
YouTube
Website
