

From Consultant to First Security Hire | Kevin Qiu, Staff Security Engineer, Shiftsmart
Kevin Qiu, Staff Security Engineer at Shiftsmart and their first security hire, breaks down the realities of building security programs from scratch. In this episode, he discusses the risk that comes with using work devices for personal purposes, why everyone wins when companies get paid AI tools and why the industry's obsession with hiring only senior talent is creating a dangerous skills gap.
0:00 How Kevin entered the field from a stint in consulting
8:13 What no one tells you about being the first security hire at a startup
18:28 The first thing security leads should do starting a security program
22:24 Security in B2B2C companies
27:53 Browser-based threats and on using work devices for personal matters
37:08 Startups are already solving tomorrow’s cyber threats
41:59 During incidents, keep the initial response team small
44:10 Why refusing to hire juniors will lead to another COBOL quagmire
🔔 Follow Kevin and Aleksandra on:
https://www.linkedin.com/in/kevinmqiu/
https://www.linkedin.com/in/aleksandra-melnikova-1012/
🔥 Powered by SquareX
Deployed as a lightweight extension, SquareX turns any browser, on any device, into a secure enterprise browser. Find out more about SquareX at https://hubs.la/Q03rPcbf0