• Home >
  • Resources >
  • SecureTalk >
  • From Punk Rock Anarchist to Bank Security Leader: An Unlikely Journey in Threat Intelligence | SecureTalk with Joe Rossi

From Punk Rock Anarchist to Bank Security Leader: An Unlikely Journey in Threat Intelligence | SecureTalk with Joe Rossi

November 18, 2025
  • copy-link-icon
  • facebook-icon
  • linkedin-icon
  • copy-link-icon

    Copy URL

  • facebook-icon
  • linkedin-icon

 

-

Most threat intelligence programs can't prove their value. Joe Rossi's team at Zions Bank did the opposite—preventing $3 million in fraud annually while actually attracting new customers to the bank.

In this episode, former punk rock kid turned threat intelligence leader Joe Rossi reveals why your most valuable security intelligence isn't from expensive vendor feeds—it's sitting in your own logs right now. He shares the hard lessons learned building CTI programs from scratch, why most organizations focus on the wrong threats, and how to make security a competitive advantage instead of just a cost center.

Key insights:

  • Why your firewall logs are more valuable than threat intelligence feeds
  • The cultural mindset required before you invest in CTI
  • How to quantify security program ROI in terms leadership actually cares about
  • Dark web monitoring: reality vs. Hollywood expectations
  • When your organization is actually ready for threat intelligence

Whether you're a CISO considering a CTI program or a security professional trying to prove value, this conversation offers practical frameworks for building security capabilities that directly impact the bottom line.


 

View full transcript

Most threat intelligence programs can't prove their value. Joe Rossi's team at Zions Bank did the opposite—preventing $3 million in fraud annually while actually attracting new customers to the bank.

 

In this episode, former punk rock kid turned threat intelligence leader Joe Rossi reveals why your most valuable security intelligence isn't from expensive vendor feeds—it's sitting in your own logs right now. He shares the hard lessons learned building CTI programs from scratch, why most organizations focus on the wrong threats, and how to make security a competitive advantage instead of just a cost center.

 

Key insights:

  • Why your firewall logs are more valuable than threat intelligence feeds
  • The cultural mindset required before you invest in CTI
  • How to quantify security program ROI in terms leadership actually cares about
  • Dark web monitoring: reality vs. Hollywood expectations
  • When your organization is actually ready for threat intelligence

Whether you're a CISO considering a CTI program or a security professional trying to prove value, this conversation offers practical frameworks for building security capabilities that directly impact the bottom line.

 

About our guest

Joe Rossi

Bio:

Joe Rossi considers himself a threat-informed defense specialist and has built threat intelligence, threat hunting, adversary emulation, and detection engineering capabilities for a number of organizations within the finance, technology, and legal sectors. He has held a variety of roles throughout his career, including systems administration, incident response, vulnerability management and even moonlighted as a trivia DJ and taxi driver for a period of time.  Most recently, he was the Senior Manager of Offensive Security for Zions Bancorporation, primarily responsible for incorporating threat intelligence across multiple business functions.  This also included enhancing the organization's fraud detection & prevention capabilities, saving the bank and its customers millions annually.  Joe thrives on collaboration and is known to challenge conventional cybersecurity thinking, seeking input from stakeholders who are often passed over by traditional information security programs in order to create optimal business outcomes and better adaptations to the changing cyber threat landscape.  He has a BS in Information Technology from Western Governors University, holds several SANS and other industry certifications, but considers himself an autodidact when it comes to technology as his real education began the day he dialed into his first BBS.

Currently taking a break between roles, Joe is busy developing new skills related to Generative AI and threat intelligence, exploring his new home in the Pacific Northwest, and baking more bread than his wife, two cats, and he can reasonably eat

Justin BealsFounder & CEO Strike Graph

Justin Beals is a serial entrepreneur with expertise in AI, cybersecurity, and governance who is passionate about making arcane cybersecurity standards plain and simple to achieve. He founded Strike Graph in 2020 to eliminate confusion surrounding cybersecurity audit and certification processes by offering an innovative, right-sized solution at a fraction of the time and cost of traditional methods.

Now, as Strike Graph CEO, Justin drives strategic innovation within the company. Based in Seattle, he previously served as the CTO of NextStep and Koru, which won the 2018 Most Impactful Startup award from Wharton People Analytics.

Justin is a board member for the Ada Developers Academy, VALID8 Financial, and Edify Software Consulting. He is the creator of the patented Training, Tracking & Placement System and the author of “Aligning curriculum and evidencing learning effectiveness using semantic mapping of learning assets,” which was published in the International Journal of Emerging Technologies in Learning (iJet). Justin earned a BA from Fort Lewis College.

Keep up to date with Strike Graph.

The security landscape is ever changing. Sign up for our newsletter to make sure you stay abreast of the latest regulations and requirements.