In episode 157 of Cybersecurity Where You Are, Sean Atkinson sits down with <a rel="noreferrer noopener" target="_blank" href="https://www.linkedin.com/in/griecomc">Matthew Grieco</a>, Cyber Incident Response Team (CIRT) Principal Analyst at the Center for Internet Security® (CIS®), and Dustin Cox, CIRT Analyst at CIS. Together, they explore the unpredictable world of cyber incident response. From ransomware investigations to digital forensics, the team shares how they adapt to evolving threats, leverage open-source tools, and collaborate to support state and local governments. The conversation highlights the mission-driven mindset that fuels their work and the importance of continuous learning, effective communication, and teamwork in cybersecurity. Here are some highlights from our episode:<ul><li>00:44. Introductions to Matt and Dustin</li><li>01:20. Inside the typically untypical day of a CIRT analyst</li><li>05:33. Continuous learning and teamwork as ways to keep up with evolving threats</li><li>07:38. Inside the cybersecurity tooling used by CIRT to support state and local governments</li><li>14:51. How different skillsets on the team produce a unified incident response methodology</li><li>19:26. The work of a mission-driven team to uncover root causes for security incidents</li><li>25:52. An example of a case handled by Matt and Dustin</li><li>30:16. How CIRT assesses potential talent and looks for problem solvers</li></ul>Resources<ul><li><a rel="noreferrer noopener" target="_blank" href="https://www.cisecurity.org/ms-isac?utm_source=wistia&utm_campaign=msisac&utm_medium=audio&utm_term=theme_tl&utm_content=2025-msisac-podcast_157-wistia-lp_view">Multi-State Information Sharing and Analysis Center®</a></li><li><a rel="noreferrer noopener" target="_blank" href="https://www.cisecurity.org/insights/white-papers/the-cis-security-operations-center-soc-the-key-to-growing-your-sltts-cyber-maturity?utm_source=wistia&utm_campaign=cis&utm_medium=audio&utm_term=theme_tl&utm_content=2025-cis-podcast_157-wistia-content_dl">The CIS Security Operations Center (SOC): The Key to Growing Your SLTT's Cyber Maturity</a></li><li><a rel="noreferrer noopener" target="_blank" href="https://www.cisecurity.org/insights/podcast/episode-152-driving-response-time-while-enriching-telemetry?utm_source=wistia&utm_campaign=cis&utm_medium=audio&utm_term=theme_tl&utm_content=2025-cis-podcast_157-wistia-podcast_sub">Episode 152: Driving Response Time While Enriching Telemetry</a></li><li><a rel="noreferrer noopener" target="_blank" href="https://www.cisecurity.org/insights/podcast/episode-126-a-day-in-the-life-of-a-cti-analyst?utm_source=wistia&utm_campaign=cis&utm_medium=audio&utm_term=theme_tl&utm_content=2025-cis-podcast_157-wistia-podcast_sub">Episode 126: A Day in the Life of a CTI Analyst</a></li><li><a rel="noreferrer noopener" target="_blank" href="https://www.cisecurity.org/insights/white-papers/combatting-ransomware?utm_source=wistia&utm_campaign=cis&utm_medium=audio&utm_term=theme_tl&utm_content=2025-cis-podcast_157-wistia-content_dl">Combatting Ransomware</a></li></ul>If you have some feedback or an idea for an upcoming episode of Cybersecurity Where You Are, let us know by emailing&nbsp;<a rel="noreferrer noopener" target="_blank" href="mailto:podcast@cisecurity.org">podcast@cisecurity.org</a>.

Podurama

Home

Trending

Personal

Your Podcasts

New Episodes

My Files

Favourite Episodes

Tags (Folders)

Recently Played

Bookmarks

Followed Playlists

Episode 157: How a Modern, Mission-Driven CIRT Operates

Cybersecurity Where You Are (video)

AI Chapters

AI Insights

Reviews