Thinking Like a Security Architect with Lester Nichols

In this month's special edition of the 2GT Podcast, I sit down with Lester Nichols, a long-time 2GT fan and the author of the Cybersecurity Architect's Handbook — 2nd Edition. And to be clear, this isn't a sponsored interview; Lester sent a copy with no strings attached, and once I started reading it, I had to get him on the show.

Lester walks us through his path from pre-med student to senior security architect — including the time an Access database he built for an anesthesiologist exposed a skimming biller, and how Norwich University's information assurance program launched his career. We dig into what makes the 2nd Edition "transformational" rather than just an update: a full rewrite of every chapter, the fight to keep the foundational chapters the publisher wanted cut, labs that now build progressively on each other (ending in a human-in-the-middle AI automation exercise), and a combined 1,400+ pages of book, labs, and supplemental material — all using free, open-source tooling you can replicate in a #homelab.

Beyond the book, the conversation gets big: the record Microsoft month and what AI-assisted vulnerability discovery means for patch management, supply chain attacks from SolarWinds to 7-Zip, why zero trust is still very much valid in a post-AI world (trust levels, segmentation, thinking the what-ifs), China's quantum claims and the legacy systems hiding in every enterprise's closet, all-in-one firewall failures, and honest, career-long advice for people new to InfoSec — fundamentals, burnout, and beating imposter syndrome. Links to the book, Lester's GitHub, and his blog can be found here:

• https://secdoc.tech/
• https://github.com/secdoc
• https://github.com/secdoc/Recommended_Reading
• https://github.com/secdoc/soc-pipeline-public
• https://www.amazon.com/Cybersecurity-Architects-Handbook-architects-enterprise/dp/180610539X/
• https://github.com/secdoc/devsecops-pipeline-public