Your First 90 Days in a New AppSec Role

https://is1-ssl.mzstatic.com/image/thumb/Podcasts221/v4/19/7c/1c/197c1c4b-2334-6c9f-4d9c-6c94e0aa6dab/mza_2401321671785836310.jpg/600x600bb.jpg

Secrets of AppSec Champions

Chris Lindsey

15 episodes

3 months ago

Join host Chris Lindsey as he digs into the world of Application Security with experts from leading enterprises. Each episode is theme based, so it's more conversational and topic based instead of the general interview style. Our focus is growing your knowledge, providing useful tips and advice. With Chris' development background of 35 years, 15+ years of secure coding and 3+ years running an application security program for large enterprise, the conversations will be deep and provide a lot of good takeaway's that you can use almost immediately.

Technology

Science

RSS

All content for Secrets of AppSec Champions is the property of Chris Lindsey and is served directly from their servers with no modification, redirects, or rehosting. The podcast is not affiliated with or endorsed by Podjoint in any way.

Technology

Science

Your First 90 Days in a New AppSec Role

Secrets of AppSec Champions

48 minutes

1 year ago

Your First 90 Days in a New AppSec Role

📋 Show Notes
Secrets of AppSec Champions: Laying the Foundation of Application Security

In the inaugural episode of the multi-part series 'Decoding Application Security,' host Chris Lindsey and guest Anthony Israel-Davis, Product Security Manager at Fortra, dive into the fundamentals of building a successful application security program for large teams. They discuss essential first steps when starting at a new company, the importance of understanding the company culture, and the critical role of security champions. The conversation covers various aspects of application security, including the implementation of SCA, SAST, and DAST tools, the nuances of API and container security, and the importance of building strong relationships with developers and QA teams. Ultimately, the episode emphasizes the incremental and strategic approach necessary for managing and mitigating risks effectively in a complex software development environment.

❇️ Key Topics with Timestamps
00:00 Introduction to Software Building

00:59 Meet the Expert: Anthony Israel Davis

01:08 First Steps in a New Company

02:57 Understanding the Application Environment

04:54 Building a Solid Security Foundation

11:29 The Role of Static Analysis (SAST)

17:12 Empowering Teams with Security Mindset

22:07 Collaboration with QA for Security

24:47 Ensuring a Clean Build: Developer and QA Collaboration

26:17 Dynamic Scanning Explained

27:32 Regression Testing and DAST

28:05 Understanding DAST Results and Fuzzing

33:24 API Testing: A Critical Component

37:02 Containerization and Security

42:12 Building a Secure Development Process

46:39 Final Thoughts and Key Takeaways