All Episodes
From Government CISO to AI-Native Security Founder (Robert Wood)
· 41:13 · Season 1, Episode 28

From Government CISO to AI-Native Security Founder (Robert Wood)

0:00 / 41:13

// TRANSMISSION

His hardest problem wasn't hackers — it was a 500-person security organization whose specialist teams couldn't speak the same language.

In this episode of We Built It Because We Had To, host Jonathan W. Buckley sits down with Robert Wood, founder and CEO of Sidekick Security, an AI-native cybersecurity consulting firm. Robert started out doing offensive red team work, then ran security programs at several tech companies before becoming the enterprise CISO at the Centers for Medicare and Medicaid Services, leading a team of nearly 500 across five divisions. That job exposed the problem that eventually pushed him to found Sidekick: specialist security teams that all report to the same leader still can't speak the same language, so he built an internal Snowflake-based "security data lake" to force the data together. They talk about why AI governance has become Sidekick's fastest-growing line of work as boards push AI adoption faster than security teams can keep up, how deepfakes and voice cloning are making old-school phishing dramatically more effective, and zerodayclock.com, the site Robert points to that tracks how the time between a vulnerability being discovered and weaponized has shrunk from years to minutes. Robert also breaks down why Sidekick made a hard pivot away from generic federal cyber contracting, how they built the business almost entirely on trust-based referrals instead of a sales team, and VSEC, their virtual CISO offering that blends senior human judgment with AI tooling they originally built just for themselves. He closes with advice for founders three months into building a services firm: don't rush to extract yourself from the work, and be ready to sit in the uncomfortable middle for longer than social media tells you to.

Connect with Robert Wood: https://www.linkedin.com/in/holycyberbatman/
Zero Day Clock (mentioned in the episode): https://zerodayclock.com

Enjoying the show? Follow We Built It Because We Had To wherever you listen and leave a rating — it helps other founders find these stories. For more on how The Artesian Network helps early-stage tech companies get to market and scale, visit https://www.artesiannetwork.com/?utm_source=podcast&utm_medium=referral&utm_campaign=ep28&utm_content=shownotes

Key Takeaways

  • Robert Wood founded Sidekick Security, an AI-native cybersecurity consulting firm, after identifying that specialist security teams within the same organization couldn't communicate effectively despite reporting to the same leader.
  • At CMS, Wood built an internal Snowflake-based security data lake to consolidate data from disparate specialist teams, which became a foundational concept for Sidekick's approach.
  • AI governance has become Sidekick's fastest-growing service line as boards accelerate AI adoption faster than security teams can manage the associated risks.
  • The time between vulnerability discovery and weaponization has compressed from years to minutes, as tracked by zerodayclock.com.
  • Sidekick pivoted away from generic federal cyber contracting and built the business primarily through trust-based referrals rather than traditional sales.

Frequently Asked Questions

What was Robert Wood's role before founding Sidekick Security?

He was the enterprise CISO at the Centers for Medicare and Medicaid Services, leading a security organization of nearly 500 people across five divisions, and previously held security leadership roles at tech companies and performed offensive red team work.

What is Sidekick Security's VSEC offering?

VSEC is a virtual CISO offering that combines senior human judgment with AI tooling that Sidekick originally built for internal use.

Why did deepfakes and voice cloning make phishing more effective?

The show notes indicate these technologies made old-school phishing dramatically more effective, but do not provide specific details on the mechanism.

How did Sidekick build its customer base?

The business was built almost entirely on trust-based referrals instead of using a traditional sales team.