Ross Haleliuk

Venture in Security

Industry's top newsletter (750,000 reads annually) about building startups, as well as business and investment sides of cybersecurity. Covering topics like venture capital, go-to-market strategies, and business models in cybersecurity.

Author | Blogger

Cyber for Builders (Amazon Best Seller)

'Cyber for Builders: The Essential Guide to Building a Cybersecurity Startup'  is the most comprehensive resource about building the future of cybersecurity available on the market. Within hours of the official launch, the book instantly became the Amazon best seller in several categories. In 2024, 'Cyber for Builders' got recognized as Book of the Year at the SANS Difference Makers Awards, the most prestigious recognition available to cybersecurity authors globally. 

Most cybersecurity books talk about how to do security. This book is different as it is intended first and foremost for builders - startup founders, security analysts, security engineers, marketing and sales teams, product managers, VCs, angel investors, software developers, investor relations and analyst relations professionals, and others who are building the future of cybersecurity.

Author

Inside the Network

Inside the Network is all about building category-defining cybersecurity startups.

Collectively, we’ve spent decades building, researching, and investing in cybersecurity companies. On this podcast, we invite you to join us inside the network where we bring you the best founders, operators, and investors building the future of cyber.

We will talk about the hard parts of the founder journey - launching companies, getting to product-market-fit, raising capital, and scaling to an exit. Both the success stories and the epic failures. We are here to make the founder journey easier, but not too much easier because anything worth building is hard (but you already knew that 😊).

Podcast Co-Host

Clutch Security

Clutch is addressing the increasingly critical challenge of non-human identity security within modern enterprises.

As digital infrastructures expand and become more complex, the management and security of non-human identities—ranging from API keys and secrets to tokens and service accounts—have emerged as a pivotal yet often neglected aspect of cybersecurity. Recognizing this gap, Clutch is developing an enterprise platform dedicated to the comprehensive protection and management of these identities.

Angel Investor

Security Tinkerers

Member of The Security Tinkerers, a non-profit organization championing the advancement of cybersecurity. I am proud to be part of a community of world-class CISOs, CTOs, cybersecurity CEOs, and industry leaders. Our collective mission, encapsulated in our byline "Advancing cybersecurity through trust," focuses on fostering growth and innovation in the cybersecurity field. Through collaborative efforts, we aim to nurture a safer digital environment by sharing knowledge, resources, and expertise.

Member

Nullify

Nullify augments your AppSec team with AI agents capable of carrying out multiple levels of product security work autonomously.

SANS Institute

The SANS Difference Makers Awards shine a light on the cybersecurity practitioners who are leading innovative developments in the industry, who’ve made outstanding security achievements, and who are contributing back to the InfoSec community in ways that deserve recognition.

Advisory Board - SANS Difference Makers Awards 

Stealth Startup

Cybersecurity has been caught in the same patterns for too long. The hardest problems remain unsolved - not because they’re impossible, but because we haven’t asked the right questions.

It’s time for a new approach. A new way of thinking. A product that doesn’t just tell CISOs they’ve got problems. We have a lot of visibility. It’s time to make security actionable. 

Having built and scaled products for the past decade, I am embracing the most ambitious journey yet. It’s time to build. More soon.

Co-founder & CEO

Amazon Web Services (AWS)

AWS & CrowdStrike Cybersecurity Accelerator in collaboration with NVIDIA is an equity-free program designed to empower cybersecurity startups from EMEA and US with product development, GTM and fundraising support.

Mentor - AWS and CrowdStrike Cybersecurity Accelerator

LimaCharlie

LimaCharlie enables organizations to detect & respond to threats, automate processes, reduce the number of vendors, and future-proof their security operations.

We do it by giving security teams full control over how they manage their security infrastructure. Get full visibility into your coverage, build what you want, control your data, get the security capabilities you need, for however long you need them, and pay only for what you use.

Head of Product

Experienced operator & builder shaping the future of cybersecurity. Now working on something new. 

📙 Book about building the future of cybersecurity 👉🏻 cyberforbuilders.com
📬 Blog & newsletter 👉🏻 ventureinsecurity.net
🚀 Angel syndicate for security practitioners  👉🏻 visangels.com

"Write something worth reading or do something worth writing." —  Benjamin Franklin

“Life is too short to do mediocre work, and it is definitely too short to build shitty things.” — Stewart Butterfield, Co-Founder of Slack

"As you start to walk on the way, the way appears." — Rumi

In security or otherwise, trends are temporary. Stick to fundamentals.

Director of Product

Let me say this out loud: the rate of growth of cyber startups will never match the rate of growth of the new AI companies. Even new AI x security companies won't just fly off the shelves because they are AI-native. 

The reason is pretty simple: in cyber, growth moves with the speed of trust, not the speed of shipping new features. Interestingly enough, as AI is accelerating the speed of shipping new features it's actually extending the speed of trust so POCs can become longer. 

If the current trend continues, I think it's going to drive a lot of the tourist VCs out of cyber because they just won't be able to justify investing in "slower-growing" security companies over all these "AI supernovas" with $10M ARR after one year. Looking at this nice chart from Bessemer, cyber is gonna stay as "Cloud Centaur" by default and by design. 

Over the long term, this is going to be a good thing for the industry, I think. 

And yet, none of this changes the fundamentals of the security market, the fact that cyber is a trillion-dollar opportunity, and that there will be many fantastic returns. It's just that successful companies in cyber will probably look like pretty average AI startups in other industries if all you look at is ARR. 

P.S. Yes, I know, there's Delve and similar companies that are "AI-native and cyber" but I'll stand my ground that the reason they're growing so fast is because they are sales enablement tools and not security or compliance tools. What they do is super valuable but it's a different market ("get your cert to sell to enteprises") with different rules of the game.

Security product leader, author, advisor, board member and investor.

Safi M.

Cypress Cyber Consulting

•	Servicing cyber security department’s visions in new security controls technology implementation for a utility’s client
•	Defining the scope and controlling the budget for new projects
•	Acting as a thought leader for the project team to verify new changes to project scope
•	Creating technical documentation for new cyber controls to deep dive into the decomposition
•	Presenting materials to stakeholders in order to communicate important project information
•	Develop and integrate cybersecurity design in solutions
•	Identify critical points in company cyber posture

Cyber Security Consultant - Cyber Architect - Project Manager

Booz Allen Hamilton

•	Protected sensitive and proprietary information by managing enterprise projects and initiatives regarding data security, security architecture, threat and incident management, compliance, risk management, executive protection, surveillance, access control, change control, business continuity, and disaster recovery. 
•	Collaborated closely with technical engineers, vendors, and senior management across various infrastructures, networks, and security services spaces to troubleshoot networks, processes, identify gaps in procedures, and implement solutions. 
•	Directed on-going vulnerability assessments, penetration tests, and application and network security scans. 
•	Enhanced technology and optimized process to ensure accurate and up to date inventory of critical infrastructure and applications. 
•	Conducted internal consulting for development and implementation plans and procedures for privacy functions. 
•	Facilitated metrics and reporting frameworks to measure the capability of the security framework. 
•	Authored process documentation to support common understanding of ownership and responsibilities of task within project lifecycles.

Notable Contributions: 
•	Served as a Technical Project Leader for various complex cybersecurity projects and communicated with stakeholders regarding project plans, progress, design, and risk mitigation. 
•	Spearheaded the planning and coordination of complex enterprise-wide projects including conducting UAT for engineering team to drive organization-wide critical business development software forward to completion.

Cyber Security Senior Project Manager - Lead Associate

•	Drove efforts through the successful implementation of security management projects to meet the vulnerability management policy, standards, and requirements of BAH through the development, maintenance, and delivery of infrastructure and network services. 
•	Designed security architectures for clients incorporating a variety of endpoint, network, SIEM, vulnerability management, and cloud security tools. 
•	Developed and managed client project plans, implementation plans, and project deliverables including Fortune 500 companies. 
•	Performed and evaluated information risk regularly, identifying areas of risk, conducting recurring controls rationalization, and assisting with solutions for remediating exposures to improve the reliability and performance of service. 
•	Collaborated with account management, legal, finance, and SOC to gather, translate, and transform business requirements into effective technology solutions. 

Notable Contributions: 
•	Led a cross-functional project management team to manage large cybersecurity projects by defining the rollout strategy, high level architecture and tactical implementation roadmaps based on reduction in risk, existing infrastructure, inputs from business teams and analyzing in-scope applications.
•	Spearheaded endpoint detects and response platforms for various clients including creating new cyber policies, manage assets, address malicious file and malware execution paths, and oversee remediation recommendations. 
•	Led the improvement of a security architect program including training junior employees, building training programs, building new SOPs, creating new troubleshooting scripts and applications.

Cyber Security Project Manager - Associate

•	Provided leadership and guidance to junior employees, contributed to the development of innovative principles and ideas, provided solutions that are highly creative, and acted as a leader on large programs or projects that affect the organization's long-term goals and objectives. 
•	Expanded existing key portfolio partnerships and assisted in leading business development efforts, negotiations, and relationship-driven account management. 
•	Applied knowledge of Cybersecurity consulting services to sell and manage the conceptualization, design, and implementation of secure technical solutions, including operationally viable and efficient applications, systems, architectures, and infrastructure. 
•	Analyzed data and identified gaps in resource allocation, project completion, alignment to strategy or other critical metrics to develop innovative solutions. 
•	Served as a team lead working on high complexity tasks in the account, products and services, and the sales and account management process.
•	Facilitated training and education to internal teams regarding custom solutions and project management.

Notable Contributions: 
•	Led innovative Cybersecurity solutions by leveraging comprehension of existing and emerging security products and technologies to protect the client’s systems and information.

Technical Account Manager - Associate

•	Consulted clients by providing expert guidance to assist in planning, implementing, developing, and maintaining cybersecurity posture.
•	Partnered with teams to implement technology and achieve methods for aligning to their processes and reducing vulnerabilities. 
•	Performed application and technology security reviews ranging from threat modeling to penetration testing. 
•	Monitored threat intelligence for private and public sector clients. Determined baselines and apply contextual analysis to access security events. 
•	Established, planned, and administered the overall policies, goals, and procedures for the information security function. 
•	Developed and tested information security plans and controls in conjunction with internal and external auditors. 
•	Performed and evaluated information risk regularly, identifying areas of risk, conducting recurring controls rationalization, and assisting with solutions for remediating exposures. 

Notable Contributions: 
•	Spearheaded effort to resolve technical debt in a highly visible and consumable service resulting in significant user experience gains as well as enterprise risk reduction.

Cybersecurity Engineer - Senior Consultant

Automation Solutions, Inc

- Utilize PHP, JavaScript, jQuery, JSON, HTML/XHTML, CSS, Python
- Develop secure code and secure coding practices for our products
- Write Python scripts to use with PHP 
- Develop unit tests
- Discover and fix bugs with in the web application

Programmer

- Analyze system services, operating systems, networks and applications
- Use tools such as BurpSuite, Nessus, Kali OS, OWASP Zap, Linux OS, Vega, AppScan, Nmap, Metasploit
- Discover security issues that appear under new threat scenarios
- Participate in security audits, risk analysis, vulnerability testing and security reviews
- Perform advanced penetration testing on devices
- Create custom malware payloads
- Write detailed reports on vulnerabilities found in our products and applications
- Create custom graphs from threats found and relate them to a business impact perspective for      senior management 
- Conduct monthly meetings with the IT Manager, COO, and CEO to discuss findings and next steps to mitigate risks
- Develop employee security awareness material and newsletter

Information Security Analyst

OpenLink Financial

- Debug SQL in order to solve problems within our application called RightAngle
- Setup and execute SQL traces in order to search for problem SQL processes
- Create dynamic SQL scripts to enhance performance and customer requests in our application
- Interact with clients in order to streamline the communication and efficiency process
- Monitor client database performance
- Work with clients on database, network, and application security
- Understand how the application interprets data vs. how it should be interpreted
- Conduct weekly meetings with client CIOs, Directors, IT Managers, and Analysts

Database Analyst

Geek Squad

- Remove viruses and fix other issues on client's personal computers
- Fix advanced connectivity issues
- Merge client data from old to new devices
- Install core hardware components in desktops

Advanced Repair Agent

OKWaves Skateboards & Apparel

- Set up company directory, emails, and main network
- Design the company website
- Inventory and asset management
- Found cost effective and new technology solutions for the company
- Conduct penetration tests and vulnerability scans on company network

IT Manager

Sam Tech

- Setup networks for small businesses and individuals
- Assisted in server management
- Migrate data on site for businesses
- Troubleshoot on site application problems
- Manage client databases for appropriate user access

IT Technician

BKD CPAs & Advisors

- Conduct general IT reviews that meet FFIEC guidelines
- External Penetration Testing of IT systems
- Vulnerability analysis of IT systems
- Create risk assessment, security analyses, and audit reports
- Understand how to manage an IDS and flaws that exist
- Conduct physical security reviews throughout banks

IT Risk Services Intern

Harsco Corporation

- Created and deployed corporate standard imaged laptops and desktops using Ghost
- Assisted in closing out 100+ help desk tickets including station setups, relocations, data migrations, and troubleshooting
- Worked after hours to help deploy images in increase production
- Assisted in redesign of a computer lab
- Assist in business continuity and disaster recovery
- Managed active directory and shared servies to run security checks on user access
- Helped maintain up to date inventory on supplies

IT Intern

-Troubleshoot computers, tablets, and other electronic devices.
-Setup new machines with clients

Consultation Agent

Visionary strategist with progressive experience in information security management, end-to-end solution design/architecture, governance, and infrastructure planning for large enterprises within various industries. Transformational leader recognized for leveraging technology as a driving force to maximize profitability and longstanding business growth. Expert in translating evolving industry risks in ambitious technology roadmaps while synergizing people, procedures, and technology around proactive defense. Thought leader capable of motivating high-performing teams to maximize productivity, while forming cohesive multigenerational team environments. 

Recognized for Subject Matter Expertise in eliminating electronic vulnerabilities by implementing and re-architecting enterprise-level, disaster-resistant, multi-tiered security infrastructure. 
Adept at identifying and pursuing potential cost saving initiatives resulting in significant reductions in operational expenditures.

Cyber Security Consultant - Project Manager

•	Servicing cyber security department’s visions in new security controls technology implementation for a utility’s client
•	Defining the scope and controlling the budget for new projects
•	Acting as a thought leader for the project team to verify new changes to project scope
•	Creating technical documentation for new cyber controls to deep dive into the decomposition
•	Presenting materials to stakeholders in order to communicate important project information
•	Contributing to the cyber community outside of client work by writing articles, attending security conferences, and creating leads

taplio

The Battle

Ross Haleliuk

Safi M.

Followers

Posts

Engagements

Likes

Performance ScoreRoss Haleliuk's LinkedIn Performance

Ready to grow your LinkedIn presence?

taplio

The Battle

Ross Haleliuk

Safi M.

Followers

Posts

Engagements

Likes

Performance Score.css-goub6s{font-size:var(--chakra-fontSizes-md);font-weight:500;color:var(--chakra-colors-gray-600);display:block;margin-top:var(--chakra-space-1);}Ross Haleliuk's LinkedIn Performance

Ready to grow your LinkedIn presence?

Performance ScoreRoss Haleliuk's LinkedIn Performance