In our latest episode of the Future of Security Operations, Thomas speaks to Corey Hill, Director of Security Operations and Incident Response at Citrix. After working at organizations such as Mandiant and Cisco, in 2020 Corey joined the Citrix team when there were just a small handful of people on the SOC team. Today, the teams Corey leads spread across four countries and are responsible for Detection Engineering, Threat Intelligence, Threat Monitoring, SOAR Automation, and Incident Response (both CSIRT) services at Citrix. 

Topics in this episode include: 

• Corey’s journey that eventually led to his current role at Citrix. 
• How Corey’s perspective on security has evolved throughout his career and why there’s no security strategy that fits all. 
• Lessons from building multiple SOC teams from scratch.  
• How security operations have evolved.
• How Corey leverages automation to make his team more efficient and effective. 
• How Citrix prioritizes mental health for everyone who works at the company. 
• Why burnout is inevitable and how to tackle it. 
• Taking away the stigma of being breached and how to respond when it happens.  
• The role mentors have played in Corey’s professional success. 
• #1 piece of advice for those who are leading security operations teams. 
• What the future of security operations will look like.