The State of Oklahoma - Statewide MDR Project
The room was on the verge of a mutiny.
The State of Oklahoma had selected an advanced SIEM platform. Leadership was aligned. The deal was moving. And the SOC team — the analysts who had built that operation from the ground up — believed they were about to be replaced by it.
I was brought in specifically to stop it.
Not to demo features. Not to walk through architecture diagrams. To stand in front of a room full of security professionals whose careers felt like they were on the line and tell them the truth.
The platform wasn’t coming for their jobs.
It was coming for their alert queues. Their false positives. Their 3am noise. The soul-crushing, repetitive work that was burning them out and keeping them from the threat hunting, investigation, and incident response they actually trained for.
When that landed — really landed — the room changed.
Not gradually. All at once.
The questions stopped being “will I still have a job” and started being “how do we get this deployed.”
At the conclusion of the meeting, the team was aligned.
The lesson never left me.
The biggest challenges in cybersecurity are almost never technical. The technology is usually the easy part. What’s hard is walking into a room full of smart, experienced people who are scared — and earning their trust before you ever open a laptop.
Organizations that modernize successfully don’t just invest in better technology.
They invest in the people they need to believe in it.