“It's been my pleasure to with with Jarrett over the past 5 years. Jarrett was a key contributor to our security program at HubSpot, specifically around threat detections, incident response, and data analytics. There isn't another person I've worked with in my entire career that is as knowledgeable as Jarrett in those areas. He is a Subject Matter Expert in this field. Jarrett's ability to take any complex ask and translate it into something easily consumed is unsurpassed by many engineers in the industry.”
Activity
-
Six months undetected. Tunneling traffic straight out to the internet. And the thing that finally caught wind was an unmodified Kali header sitting…
Six months undetected. Tunneling traffic straight out to the internet. And the thing that finally caught wind was an unmodified Kali header sitting…
Liked by Jarrett Polcari
-
Black Hat, we’re coming. Come find Nebulock at Booth #5312 and see what hunt-first security looks like in action. We’re building a new model for…
Black Hat, we’re coming. Come find Nebulock at Booth #5312 and see what hunt-first security looks like in action. We’re building a new model for…
Liked by Jarrett Polcari
-
Not every security problem needs an LLM, and treating them all like they do can get expensive - fast. An LLM is nondeterministic and priced per…
Not every security problem needs an LLM, and treating them all like they do can get expensive - fast. An LLM is nondeterministic and priced per…
Liked by Jarrett Polcari
Experience & Education
-
Nebulock, Inc.
View Jarrett’s full experience
See their title, tenure and more.
or
Licenses & Certifications
-
Splunk Certified Cluster Administrator
Splunk
Issued -
-
-
-
-
Recommendations received
1 person has recommended Jarrett
Join now to viewMore activity by Jarrett
-
Nebulock is hiring Account Executives, and this is a great time to join. We recently closed a $25M Series A to accelerate our mission: building a…
Nebulock is hiring Account Executives, and this is a great time to join. We recently closed a $25M Series A to accelerate our mission: building a…
Liked by Jarrett Polcari
-
Super excited to be running this workshop @ DEF CON this year along side Sydney Marrone and Eric Brown. We will be showing off some agentic threat…
Super excited to be running this workshop @ DEF CON this year along side Sydney Marrone and Eric Brown. We will be showing off some agentic threat…
Shared by Jarrett Polcari
Explore more posts
-
Tobias Knecht
NIS2 is here. Is your abuse desk ready? 🇪🇺📋 The directive doesn't just want security — it wants PROOF you can respond to incidents. That means: 📝 Documented abuse handling 🔍 Evidence trails ⏱️ Response time metrics Compliance isn't checkbox theater. It's building processes that actually work.
-
Michael Atkinson, CISSP
Healthplex just agreed to pay $2 million to the New York State Department of Financial Services after a phishing attack exposed sensitive data, because they lacked MFA and an email retention policy, and even reported the breach more than four months late. Now they’re committed to beefing up their cybersecurity and will bring in an independent auditor to make sure MFA is working across the board. #dental #insurance #dentalcybersecurity
-
James Goepel
Please see Todd Gagnon’s response. 😒 𝐒𝐀𝐃𝐋𝐘, 𝐓𝐇𝐈𝐒 𝐈𝐒 𝐍𝐎𝐓 𝐀𝐍 𝐀𝐏𝐑𝐈𝐋 𝐅𝐎𝐎𝐋’𝐒 𝐉𝐎𝐊𝐄 😒 Over the last 2 weeks, our Cybersecurity Maturity Model Certification (“CMMC”) 3rd Party Assessment Organization (“C3PAO”) line of business has seen a heavy increase in demand for CMMC Level 2 Certification Assessments. Some of the big primes are recompeting their subcontracts and forcing subcontractors to get CMMC Level 2 certified before October 1 (i.e., the new fiscal year). So, despite the fact that the United States Department of War (“DoW”) will be phasing CMMC requirements into its contracts over the next 3 years, at least some prime contractors aren’t waiting that long. The problem? There are currently ~760 assessors. DoW estimates that about 78,000 companies will need CMMC 3rd party assessments. At least 2500-3000 assessors are needed to support this level of demand if the assessments are spread across 3 years. The ecosystem can’t support primes front-loading the demand. 𝐓𝐡𝐞 𝐂𝐌𝐌𝐂 𝐞𝐜𝐨𝐬𝐲𝐬𝐭𝐞𝐦 𝐧𝐞𝐞𝐝𝐬 𝐚𝐬𝐬𝐞𝐬𝐬𝐨𝐫𝐬. 𝐍𝐎𝐖. One of the big hold-ups in adding assessors to the ecosystem is that assessors must “pass” a Tier 3 Background Screening administered by the Defense Counterintelligence and Security Agency (DCSA). It currently takes 12-18 months for new CMMC assessors to get a determination from DCSA. So, smart people who want to become assessors sit for the CMMC Certified Assessor class and exam while they wait for their Tier 3 to process. This allows them to hit the ground running as CCAs the moment the Tier 3 is complete. Yesterday, ISACA, the new CMMC Assessor and Instructors Certification Organization (CAICO), announced that they are stopping that practice. Instead of being able to sit for the CCA exam while their Tier 3 is pending, students will have to wait until their Tier 3 successfully completes. That disincentivizes current CCPs from taking CCA training. Why would someone take training 6-9 months before they sit for an exam? ISACA has also announced that a new CCA exam, and CCA curriculum, are coming in 9-12 months. Right when current CCPs’ Tier 3s will come in. Oh, and ISACA will exclusively control the curriculum. So, say goodbye to any semblance of competition that would improve quality, spur innovation, or reduce cost. Oh, and ISACA is also taking over asynchronous training at some point in the future. And making other changes that will further hurt training providers. But they won’t give details. The net result? ISACA is disincentivizing taking and offering training. We’ll have fewer assessors, RIGHT when the ecosystem needs these the most. These decisions: 🔵 hurt defense contractors and C3PAOs by decreasing supply of CCAs; 🔵 hurt DoW by reducing competition; and, 🔵 hurt the training providers and curriculum developers who invested so much time, effort, and money to build the ecosystem into the very thing that ISACA coveted. The only one who benefits from this is ISACA.
50 Comments
Explore top content on LinkedIn
Find curated posts and insights for relevant topics all in one place.
View top content