Enrique Kalb

★ Compliance, IT Support, Cybersecurity ★ Stop the worry and get the Continuous Threat Check. ★ Business-focused IT ★ LinkedIn Cyber Ninja ★

Cybersecurity sales leader with 13+ years driving growth across enterprise, federal, and regulated commercial markets.

I’ve spent my career across cybersecurity, compliance, managed IT, managed security, and co-managed IT, supporting teams in the DoD, Intelligence Community, and regulated industries like healthcare, legal, manufacturing, financial services, and construction.

I’ve built and scaled revenue engines inside growth-stage startups while also closing complex enterprise and regulated-market deals across cybersecurity, compliance, and managed services.

What I’m known for is building and scaling sales teams, putting real GTM structure in place, and helping buyers make confident decisions through complex security and compliance requirements without unnecessary friction. I do my best work when deals are messy, stakeholders are senior, and trust actually matters.

Day to day, I’m working with executives, technical teams, and channel partners to move deals forward, reduce risk, and drive sustainable growth with clear communication and practical execution.

I run complex enterprise sales cycles using MEDDPICC and Sandler to qualify, forecast, and close predictable revenue across cybersecurity and SaaS platforms

Bilingual in English and Spanish.

If you’re building or scaling enterprise cybersecurity sales in regulated environments, let’s connect.

Director of Cybersecurity Sales

Continuous Networks, LLC is a locally owned IT company specializing in making IT Personal.
Continuous was started in 1997 as a web hosting company, providing organizations with Windows and Unix cloud hosting. Continuous became increasingly aware of the need for small businesses to offload their internal IT applications from in-house data closets to data centers with redundant power and networks and built their first datacenter in 2004. With the increasing reliance on hosted technologies now called the "cloud", Continuous expanded its services to include personal IT consulting, hardware procurement and provisioning, and MSP services built upon our advanced cloud technologies and expertise. For over 15 years, Continuous has helped companies expand past their IT closet with Cloud technologies, such as daily backups and high availability. Continuous has 20 employees and 24/7 monitoring.

Continuous manages over 1,000 servers, representing 1,000 companies across 100 countries worldwide.

This is why hackers remain single :-)
Luke Matthews  the MEME team

Cybersecurity Sales Leader | Enterprise, Federal & Regulated Markets | Eliminating Downtime & Compliance Gaps, Reducing Cyber Risk

No alternative text description for this image

Most password policies were written for a world that doesn’t exist anymore.

Your password is expiring so people do what they always do. 

Go ahead add a number, heck go ahead and swap a symbol, maybe bump the version from 1 to 2, and move on.  

That doesn’t stop threat actors it just trains users to hate security and look for any workarounds.

If someone is using a long passphrase they can remember, isn’t reusing it anywhere else, and keeps it private, forcing a change every 60 to 90 days doesn’t make things safer. It just looks good in a policy document.

What actually really helps in 2026 is:

- Use a long passphrase you can remember
- Don’t reuse passwords across systems
 -Turn on MFA everywhere you can
 -Use a password manager and stop trying to be a human spreadsheet LOL

Passwords should change when there’s only a reason and that is if: 

-It's after a suspected breach
-It's after clicking something weird or when a password was shared or exposed.

Just keep in mind that security has to work with how people actually behave.

If the controls only succeed with annoying users, they’ll be ignored and that’s when the real risk starts.

OMG ChatGPT was hacked!!!

No ChatGPT wasn’t fully hacked, and nobody dumped all its data on the dark web.  I have seen alot of posts about this today.   Let me paint the picture. 

What researchers showed is that you can trick an AI agent that’s connected to other systems into doing stupid things with sensitive data known to it. 

This is basically, social engineering an AI that has access to your tools and email, or apps. 

If for example the agent can see it, there’s probably a way to abuse it.

If you plug AI into email, CRM, or internal systems, you created a new path for data to walk out the door if it’s not locked down.

Most defenses today are still reactive you patch one technique, attackers find another.

AI isn’t magic it isn’t evil not yet. It’s just powerful and without guardrails, it’ll help the wrong person just as easily as the right one.

Open article: ChatGPT falls to new data-pilfering attack as a vicious cycle in AI continues by arstechnica.com

Female hand holding smartphone showing an evil with devil horn on her AI chatbot conversation app in the city. Illustrating the ideas around the risks and dangers of Artificial Intelligence (AI).

ChatGPT falls to new data-pilfering attack as a vicious cycle in AI continues

Incognito mode doesn't equal invisibility bros and gals.
Stop pretending it is.
You’re not anonymous. 

You’re just not saving your browser history. That’s it.
Your boss can still see what you’re doing on company Wi-Fi 😉 

Here’s what Incognito mode actually does....

Doesn’t save your history
Doesn’t keep cookies or data
Useful for testing and logging into multiple accounts.

Here’s what it really doesn’t do....

Hide your activity from your employer so if you are being naughty, they will find you.
Stop your ISP from seeing what sites you visit
Block websites from tracking you by IP 
Prevent malware, phishing, or weird browser extensions

Incognito is great if you’re buying a gift or using a shared computer.
It’s not a security tool. 
If your team thinks otherwise that’s a huge problem.

Incognito mode is good for keeping things clean on your device not for hiding your activity from the outside world.

Security starts with education :-)

How companies handle the aftermath of a cybersecurity breach. Luke Matthews

Companies don’t do enough after a breach.

We got hacked by a simple phishing email. You trusted us with your data for years, but here’s an identity monitoring service if you opt in.

NO!!! 

If your info was stolen, take control immediately don’t wait.

——Change your passwords and start with the breached account. Also, reused passwords make sure you change them too.

——Enable MFA as even if malicious hackers have your password, multi factor authentication can stop them.

——Alert your bank let them watch for suspicious activity.

Check your credit reports. Free once a year from the major bureaus don’t let fraud slip by unnoticed.

Your data is your responsibility. 

Companies failed don’t let that failure become yours so act fast protect yourself, and don’t wait for them to help!

Maybe this is an unpopular take but I have to say it, but I’m seeing a lot of SDRs calling themselves GTM and it doesn’t really make sense.

GTM isn’t a job title I just look at it as responsibility.

Go to market is figuring out who you’re selling to, why they should care, how you price it and how you message it, and how sales actually run. 

That work happens before anyone starts dialing.

SDRs do real work and anyone who’s done it knows it’s not for the faint of heart.

Prospecting, the calling, emailing, booking real conversations. But that’s running a motion, not building it.

Its not the same thing as writing the playbook.

I understand why it happens here I go. 

SDR doesn’t sound too sexy. GTM does and lot of startups blur the lines and suddenly everything revenue related gets labeled GTM.

But here’s the real issue.

If you disappear and the system still runs, you’re not GTM. 
If you disappear and the system breaks, you probably are.

I have no shade to SDRs that role is brutal and necessary I have done it.

But GTM is about ownership and leverage, not activity.

I said what I said.

Go ahead pay $1,000,000 and you’ll get your data back. Let me tell you there is no guarantee. A ransom is just wishful thinking with a huge price tag IMO.

If you pay once, don’t be surprised if you’re targeted again. Unless the real issue gets fixed, you’ve just shown you’re willing to write a check. I don’t see it every time, but double extortion is very real. Threat actors threaten to contact the MSP’s clients directly and extort them too. 

I have watched owners swear they’ll never pay, then change their mind fast when that threat lands and this is why security can’t just be a bunch of tools you stack together like people think.

After an incident, what really matters the most is what happens next and who’s handling the response, forensics, producing the reports? and providing environment is actually clean?

The cleanup and documentation always take the longest, and that’s usually where many clients decide whether they stay or walk. Good security gives you breathing room when things go wrong and it buys time while insurance drags on for months and months and it keeps the client relationship intact.

Security isn’t about how impressive your setup looks on paper but about how well you handle the worst day.

You might be compromised and not even know it 

Most people think they’d definitely know if their computer was hacked.
I used to think that too.

When mine was compromised, I was just at home on my laptop.
No big warning.
No ransom screen.

Just some annoying pop ups.
A couple weird browser redirects.
Things running slower than normal.

I almost brushed it off. I think most people would have. 

We’re so used to tech being SO glitchy that we don’t stop to question it anymore.
We just assume it’s well one of those things.

That’s exactly what cyber attackers rely on.

Here’s what I didn’t fully appreciate until it happened to me that…

Most cyberattacks aren’t loud.
They don’t announce themselves.

They sit quietly, watch and collect.

Once I realized that I shut everything down.

What I did next probably was overkill, but I wasn’t taking chances):

—Killed the Wi-Fi
—Ran more than one security scan
—Changed every password from a clean machine
—Wiped and reinstalled the OS
—Turned on MFA everywhere I could. This step is always missed. 

This isn’t about being paranoid.
It’s about not being naive.

If you ever get that feeling like something’s not right trust it.

PS: This things happens to very technical people too and maybe especially to them.

Life Sciences Quality and Compliance Professional, MSQA, DPS, CQA, CQM (20.9 K connections)

Highly accomplished cGMP professional with 33+ years driving quality and compliance in the pharmaceutical, biopharmaceutical, and API industries. Proven leader in complex projects, ensuring regulatory adherence and continuous improvement through expertise in QMS, risk management, and audits. Proficient in TrackWise and other industry-standard software.

taplio

The Battle

Enrique Kalb

John E. Osani

Followers

Posts

Engagements

Likes

Performance ScoreEnrique Kalb's LinkedIn Performance

Ready to grow your LinkedIn presence?

taplio

The Battle

Enrique Kalb

John E. Osani

Followers

Posts

Engagements

Likes

Performance Score.css-goub6s{font-size:var(--chakra-fontSizes-md);font-weight:500;color:var(--chakra-colors-gray-600);display:block;margin-top:var(--chakra-space-1);}Enrique Kalb's LinkedIn Performance

Ready to grow your LinkedIn presence?

Performance ScoreEnrique Kalb's LinkedIn Performance