# Fern Rojas

Fern Rojas is a cybersecurity podcast host who discusses security leadership, AI-driven cybersecurity, and the people and pressures behind security work.

- Profile: https://b2binfluencer.marketing/creators/fern-rojas/
- LinkedIn: https://www.linkedin.com/in/fernrojasaz
- LinkedIn followers: 2,538
- Topics: artificial-intelligence, leadership, cybersecurity, community-building
- Based on 13 dated posts, latest 2026-10-06

## Summary

Most useful for reaching security leaders with credible AI-era risk and leadership conversations.

- Best for: Security vendors targeting security leaders with AI-era risk and leadership content.
- Not for: Consumer identity-theft app seeking mass-market paid social and promo-code signups.
- Check first: Ask for recent episode downloads and platform or survey data behind audience claims.

### Takeaways

- Security failures are usually failures of fundamentals, not tool gaps.
- AI spending is the next cloud bill, and finance needs to be in the room.
- AI is closing the traditional SOC analyst entry door.

## Main ideas

- **Security failures are usually failures of fundamentals, not tool gaps**: After a high-profile breach, Fern Rojas argues that vendor emails claiming their products would have prevented it are usually right only in a narrow, technical sense. The real causes, in their view, are missing visibility, processes, and cross-functional ownership. Tools do not save organizations with broken fundamentals; they give them more expensive broken fundamentals. They also point to attackers automating discovery, privilege escalation, and data theft faster than teams can open an alert, and recommend practical steps: inventory everything, fix entitlements, build observability, align the CIO and CISO on shared goals, and stop approving alerts without reading them.
- **AI spending is the next cloud bill, and finance needs to be in the room**: Fern Rojas argues that AI adoption is repeating the cloud spending cycle: teams automate more, tokens burn faster, and the cost appears later as an unbudgeted invoice. They compare AI tokens to printer ink: the hardware looks cheap until the consumables arrive. Unlike a printer, AI gives no warning light when a budget is running low. Costs can escape notice when agents run longer than expected, SaaS tools quietly add AI features under pricing terms nobody read, or nobody sets a limit on unlimited usage. Their recommended response: track tokens like cloud spend, set limits, ask vendors not whether an AI feature is included but whether it will show up on the bill, and keep finance involved before the invoice arrives.
- **The human cost of security work is a leadership issue**: Fern Rojas argues that the part of cybersecurity that follows people home is its mental weight, which gets far less attention than certifications, stopped attacks, and career wins. The post describes 3AM calls, an eight-hour day quietly becoming twenty, families watching a storm they cannot see the end of, and plans that start to feel conditional because work can pull someone away at any moment. They say the load is often carried alone and wears people down more than the technical work does, tying the discussion to making the human behind the keyboard part of the professional conversation.
- **Hard conversations should happen early and in the room where decisions are made**: Fern Rojas argues that telling truth to power without torching the relationship is a skill some people never develop because they rarely get to practice it. The example is not a speech or a fight, but a short, honest answer in the room where it counted. They treat this as a learnable skill and warn that delaying the hard conversation to fix things first usually costs more than the problem itself.
- **AI is closing the traditional SOC analyst entry door**: Fern Rojas frames AI as a force reshaping security work, not a feature added on top. Their specific worry is the SOC analyst role, a sought-after entry point into cybersecurity that is now quietly disappearing. The argument addresses both people already in the role and those trying to enter through a door that is closing fast, pairing a hiring perspective with a view from early-stage companies.
- **The podcast’s role includes connecting early-stage builders with local security leaders**: Fern Rojas treats convening as part of the work: helping bring a stealth-stage story to Arizona so local security leaders could see what technology was coming. The post is about the ecosystem around the technology — early-stage founders, a regional audience, and the role a podcast can play in connecting them. They describe watching vision turn into momentum and playing a small part in bringing stealth-mode innovation to the local community.

## Work to read

- [AI is your new 2026 printer. Tokens are the ink.](https://www.linkedin.com/posts/fernrojasaz_ai-is-your-new-2026-printer-tokens-are-the-activity-7462562737576050688-3myI)
- [After a breach like Stryker, a very predictable thing happens.](https://www.linkedin.com/posts/fernrojasaz_after-a-breach-like-stryker-there-is-a-very-activity-7457474748655095809-nqNH)
- [If we had a time machine, we could send Bruce Willis back to save the dinosaurs](https://www.linkedin.com/posts/fernrojasaz_if-we-had-a-time-machine-we-could-send-bruce-activity-7475275047054503936-YJuA)
- [Nobody posts about the part of cybersecurity that follows you home.](https://www.linkedin.com/posts/fernrojasaz_nobody-posts-about-the-part-of-cybersecurity-activity-7424087444624674816-hDeK)
- [A board member once asked a CISO if they had enough resources to do their job.](https://www.linkedin.com/posts/fernrojasaz_a-board-member-once-asked-a-ciso-if-they-activity-7439380336410611712-vBRB)
- [A $61M raise—and the founders brought to Arizona](https://www.linkedin.com/posts/fernrojasaz_this-is-easily-one-of-the-coolest-stories-activity-7432841674273378304-F0DA)

## Brand relationships

- **DTF Cyber Podcast** (owned_business)

## Partnerships

Fern Rojas's posts do not describe sponsorship packages, rates, media-kit terms, or a partnership contact route. The clearest commercial-adjacent format is collaborative: episodes of the DTF Cyber Podcast built around conversations with security leaders, practitioners, and founders, announced through LinkedIn posts that direct listeners to a link rather than a sponsor or booking page. One post endorses an identity specialist in personal terms ("My right hand man"), suggesting a working relationship rather than a disclosed paid placement. Another points to episodes where guests discuss hiring, breaches, and AI-era risk. For a brand, the next step is to ask about episode sponsorship or guest fit, then agree on budget, exclusivity, approval, and scheduling case by case.

## Alternatives

- Val Tsanev: Choose Val Tsanev when the vendor's goal is enterprise pipeline rather than practitioner education. The posts show a podcast host who interviews cybersecurity founders and centres the conversation on selling into large enterprises and how CISOs adopt AI — the same buyer Rojas reaches, but through a go-to-market lens. They also name a specific show and episode, list a guest by name and role, and describe a working network of CISO introductions. A vendor can join an established interview format with named guests instead of commissioning one from scratch. If the AI-era risk message is really a positioning message for enterprise buyers, this is the closer fit.
- Justin Foster: Choose Justin Foster when the vendor wants its own technical voice to carry the AI-cost argument and can supply the format itself. The posts work the same theme as Rojas's printer-ink post — token spend, usage-based pricing, context limits and runaway tool-call loops — and add close technical detail on telemetry history and agentic reasoning. Their company-voiced, product-linked style makes this kind of contributor a quick fit for a vendor's own blog, webinar or LinkedIn series, keeping the product message on screen.
- Z Ali S.: Choose Z Ali S. when the vendor needs an analyst-style position on how AI changes security demand. The posts argue that AI vulnerability discovery will generate more noise and false positives than teams can absorb, that the work will demand more security people rather than fewer, and that adopting AI safely raises new data-governance questions. That fits a campaign built around a written point of view on 'what AI changes for security teams', especially for a vendor selling detection, prioritisation or data controls.

---
AI-assisted summary of public posts. Audience demographics are not available. Engagement appears only where we checked recent posts. Method: https://b2binfluencer.marketing/methodology/