Still Getting Cloud Wrong. Here’s What to Fix. With Simon Vernon

Why It Matters

Because cyber threats evolve faster than theory, practical, CTF‑driven training accelerates skill acquisition, directly strengthening an organization’s cloud security posture.

Key Takeaways

• Hands‑on CTFs are essential for real‑world cyber skill development
• SANS cloud security courses blend theory with intensive practical labs
• Early tinkering with electronics fuels long‑term cybersecurity expertise
• Practical training bridges knowledge gaps beyond traditional lecture formats
• Industry‑wide CTF platforms like Jupiter Rockets foster collaborative problem solving

Summary

The latest episode of Cyber Leaders features Simon Vernon, a veteran SANS instructor, CTF architect, and chief security officer for a data‑center firm. Vernon’s résumé spans early hobbyist hacking, automotive electronics, and a decade of designing hands‑on cloud‑security curricula.

Vernon stresses that traditional lecture‑based courses leave a “valley of despair” for learners; only immersive, practice‑heavy environments like SANS capture‑the‑flag (CTF) events close that gap. His cloud‑security tracks embed real‑world exploit labs, ensuring participants can translate theory into actionable defenses.

He recounts programming on a 1980s Macintosh, a “hot chicken through butter” metaphor for a return‑oriented programming exploit, and the whimsical naming of CTF ranges such as Jupiter Rockets and Operation Meltdown. These anecdotes illustrate his belief that memorable, hands‑on challenges drive deeper learning.

For CISOs and security leaders, Vernon’s approach signals that investing in practical training platforms is no longer optional. Organizations that adopt continuous, scenario‑based exercises will cultivate talent capable of defending increasingly complex cloud environments.

Original Description

In this episode, Ciaran and James sit down with Simon Vernon, Head of Research and Development at SANS Institute, to discuss cloud and AI security. As a practitioner in the field, Simon shares his experience building hands-on training, where cloud security still goes wrong, and how AI is changing attacker behaviour and creating new risks.

Contact:

Have questions or comments? Email us at [e-mail] (mailto:[e-mail])