
Episode #21
What Deserves to Survive in Security featuring Ray Espinoza
Ray Espinoza cut false positives 80% at Workday and alert volume 70% at Atmosera, fighting alert fatigue years before the industry had a name for it. Now leading information security at Elite Technology, after building eBay's first global security event response team and Workday's first customer-facing SOC, he argues that AI has finally caught up to that fight. Nate Burke and Lior Div catch him at Black Hat 2026, where the conversation swings into the Hugging Face sandbox scare and open-weight models handing nation-state capability to any threat actor with a laptop. Impactful Moments 00:00 - Introduction 02:25 - Meet Ray Espinoza: CISO, Coach, Mentor 04:05 - From Keeping eBay Alive to Defending It 05:55 - The Parallels Between Coaching Football and Running Security 09:50 - What Hasn't Changed Since the Dot Com Days 13:20 - Inside the Hugging Face Incident and Sandbox Escapes 18:20 - "This Has to Be the Worst Version of Myself Here Today" 20:45 - The Alert Fatigue Lesson: Why Turning Everything On Backfired 23:45 - From Pyramid to Loop: Building Self-Improving Security 25:50 - Is AI Finally the Weapon That Ends Alert Fatigue? 27:10 - What Should Stay Human, No Matter How Good AI Gets 28:40 - The Magic Wand Question: More Time in the Pacific Northwest 29:45 - Ray's Cybersecurity Bucket List Interested in being a guest or want to recommend someone? Reach out to us at DoHumanWork@7ai.com

