Talking Security: Insights from Microsoft Security Experts

Join Frans Oudendorp and Pouyan Khabazi in this special episode of Talking Security – Let’s Talk, where we sit down with Javier Soriano, Principal Product Manager for Microsoft Sentinel.
We dive deep into:
- The evolution of Sentinel from day zero to today
- The new Sentinel Data Lake and how it transforms long-term log retention and investigations
- Why Sentinel Graph matters for SOC teams
- The Model Context Protocol (MCP) and its role in agentic AI workflows
- What’s next for cloud-native security: automation, AI, and new operating models
If you’re curious about the future of Microsoft Sentinel and want practical insights for your security team, this episode is packed with value.

👉 Subscribe for more conversations on Microsoft Security, Modern Workplace, and cloud innovations.

#MicrosoftSentinel #TalkingSecurity #CloudSecurity #DataLake #CyberSecurity #ai
Chapters:

In this episode of Talking Security – MVP Security Insights, we sit down with Ronny de Jong to explore his remarkable journey from cybersecurity MVP to his current role at Microsoft. Ronny shares insights on:
💎 His career path and what inspired him to join Microsoft
💎 The unique cybersecurity challenges facing governments and public institutions
💎 How Microsoft’s security portfolio supports national resilience
💎 Balancing innovation, compliance, and operational realities in the public sector
💎 Future trends in threat intelligence and security operations
💎 Practical advice for aspiring cybersecurity professionals
💎 The meaning of true cyber resilience and moving from reactive to proactive security

Whether you’re passionate about public sector security, curious about Microsoft’s approach, or looking for career inspiration, this episode is packed with valuable takeaways.

Chapters:
01:28 Introduction and welcome to Talking Security podcast with guest Ronnie Young
04:37 Ronnie's career journey starting with Microsoft certifications in early 2000s
07:10 Journey into modern management, Intune blogging, and early community involvement
09:22 The story of becoming a Microsoft MVP and staying humble in the community
13:04 Decision to transition from MVP to Microsoft employee and joining the security team
20:37 Cybersecurity challenges in public sector vs private enterprises
23:25 Microsoft security portfolio approach focusing on fundamentals first
32:13 Future trends in cybersecurity and the role of AI in security operations
35:35 Advice for cybersecurity beginners on frameworks, basics, and keeping it simple
46:23 Personal motivation and what keeps him energized in cybersecurity work

In this episode of Let’s Talk, part of the Talking Security podcast, Frans Oudendorp and Pouyan Khabazi break down the biggest announcements from Microsoft Secure 2025.
We explore how Microsoft Sentinel is evolving into an agentic AI platform, the introduction of Sentinel Graph and Model Context Protocol (MCP), and how Security Copilot agents are changing the game for SecOps automation.
You’ll also hear about:
Graph-based context and why it matters for threat detection
Developer extensibility for custom connectors and AI agents
Sentinel Data Lake for affordable long-term storage
Real-world use cases for agentic AI in security operations
Plus, we share community highlights, upcoming events like YellowHat 2025 and KustoCon, and a fun geeky quiz to wrap things up.
👉 Question for you: If you could build your own Security Copilot agent, what would it do? Let us know!
🎙️ Stay safe, stay secure, and keep talking security!

In this episode of Talking Security – MVP Security Insights, Frans Oudendorp and Pouyan Khabazi sit down with Eric Woodruff—Chief Identity Architect at Semperis and long-time identity expert—to explore his journey from managing Active Directory in the public sector to shaping cutting-edge identity strategies in the cloud era.
Eric shares what it means to truly be “in” cybersecurity, the evolving role of Entra ID, and the significance of identity research like the UnOAuthorized project. We also dive into global challenges in identity management, the balance between strong security and business agility, and how community collaboration through IDPro is driving vendor-agnostic progress.
Whether you're new to identity or a seasoned expert, this conversation is packed with real-world insights, practical advice, and forward-looking trends shaping the future of identity and access management.

⏱️ Topics include:
- Career journey and cybersecurity pivot
- Challenges guiding identity strategy at Semperis
- Identity research, Entra ID, and privilege paths
- Cloud-first learning paths and emerging trends
- Balancing airtight security with operational flexibility
- Community contributions, hobbies, and staying grounded

⏱️ Timestamps
00:00 – Teaser
00:55 – Intro
01:24 – Introduction of the podcast
07:03 – Eric’s identity journey: From AD in the courts to cybersecurity at Semperis
09:28 – Challenges as Chief Identity Architect: Building identity strategy for SaaS
14:41 – Global identity security challenges: Public vs. private sector insights
19:43 – Research spotlight: The UnOAuthorized project and privilege path exposures
25:00 – App Registrations: Risks, visibility, and best practices
28:00 – Advice for newcomers to Identity Security
30:14 – Can you learn identity with only cloud knowledge?
32:23 – Future of Identity and Access Management: Entra ID, trends, and predictions
37:35 – Balancing airtight identity security with business agility
42:05 – The role of community: IDPro and vendor-neutral collaboration
44:32 – QuickFireFun questions
46:40 – Closing thoughts and takeaways
47:43 – Outro

📌 Subscribe for more expert interviews on identity, security, and modern workplace innovation.

In this episode of our MVP Security Insights series, we sit down with Stefan Schörling—a cybersecurity veteran with over 25 years of experience, SANS-certified professional, and Microsoft MVP.

🔍 What you’ll learn in this episode:
- His journey from sysadmin to CTO of a cybersecurity-focused MSSP
- Hands-on insights into Microsoft Defender XDR and Unified Security Operations (USX)
- Balancing fast incident response with deep, automated defense
- Real-world security innovations that made a difference
- Current trends in threat intelligence and managed security
- The value of community collaboration in modern cybersecurity

🎯 Stefan also shares valuable advice for professionals looking to thrive in the Microsoft Security ecosystem.

⏱️ Timestamps:
0:00 Teaser
0:45 Intro
1:15 Introduction of this episode
3:10 Introduction of Stefan
5:23 Monitoring as a foundation
6:42 primary areas of expertise, and the passion for threat intelligence, incident response, and Defender XDR
10:22 Key projects as a CTO
17:55 Global and industry-specific challenges
24:10 Security innovations that drive impact
30:11 Trends shaping the future of security operations
35:32 Advice for starting security professionals
38:36 AI Question.... One tip Stefan would give his younger self
41:26 Why community matters in cybersecurity
46:18 The role of the MVP program
49:13 Personal goals and what drives him
51:12 Quickfire Fun Questions
52:30 Closing of this episode
54:14 Outro

🔔 Subscribe for more interviews with MVPs, security leaders, and Microsoft experts sharing insights from the frontlines.

#Cybersecurity #MicrosoftDefender #MVPInsights #XDR #IncidentResponse #ThreatIntelligence #MicrosoftSecurity #StefanSchörling