Building Zero Trust Tools: Inside ThreatLocker with Product Manager Yuriy Tsibere

About this episode

Yuriy Tsibere discusses the development of security tools at ThreatLocker and the importance of user education in cybersecurity.

In this episode of Simply Defensive , hosts Josh Mason and Wade Wells welcome Yuriy Tsibere, Product Manager at ThreatLocker, for a behind-the-scenes look at how security products actually get built. Yuriy's path to cybersecurity started in Ukraine, where he worked in telecom during sophisticated APT campaigns that lasted over a year. Now at ThreatLocker, he shapes the tools defenders use daily—from allow listing to compliance automation. Episode Highlights: What product managers actually do at security companies APT attack patterns: social engineering meets technical exploitation How allow listing, ring fencing, and network control protect endpoints Defense Against Configuration (DAC): automating FedRAMP, HIPAA, and NIST compliance Why misconfigurations remain one of the biggest security gaps Balancing strict security with real-world usability Yuriy's top advice for defenders: Educate your personnel Key Takeaway: Most breaches still come from employees clicking without paying attention. Security products matter, but user education accounts for the largest share of issues. Yuriy also emphasizes that when compliance drift happens—when systems become uncompliant—it should trigger…

People in this episode

Hosts: Josh Mason, Wade Wells

Guest: Yuriy Tsibere

Topics covered

• Zero Trust
• cybersecurity
• product management
• compliance
• security tools
• user education

Keywords

• Zero Trust
• ThreatLocker
• APT campaigns
• allow listing
• compliance automation
• security gaps
• user education
• configuration drift

Mentioned in this episode

Organizations: ThreatLocker, FedRAMP, HIPAA, NIST

Places: Ukraine

More episodes of Simply Defensive

• S6:E3 - Tom Dejong - Inside the BHIS SOC: Triage, Curiosity, and Career Growth · May 4, 2026 · 31 min
• S6E2: John Hammond on Security Research, Storytelling, Deception, and Getting Hired in Cybersecurity · March 17, 2026 · 39 min
• From Blue Team Challenges to AI Innovations: A Conversation with Jason Haddix · February 24, 2026 · 32 min
• From Pre-Law to FLARE: How Josh Stroschein Became Google's Malware Analyst · December 1, 2025 · 40 min
• Cyber Insurance Explained: What Blue Teams Need to Know Before an Incident · November 17, 2025 · 33 min
• Building Forensics Tools That Last | Brian Carrier (Autopsy, Sleuth Kit) · November 10, 2025 · 32 min