The Elephant in AppSec
de The Elephant in AppSec
Cel mai nou episod
Don't just model the attack, model the recovery with Petra Vukmirovic
Don't just model the attack, model the recovery with Petra Vukmirovic
Despre acest podcast
Time to discuss AppSec issues no one talks about.
Episoade
Cele mai noi 20 din 89 episoade
- Don't just model the attack, model the recovery with Petra Vukmirovic · 30 minMy guest today is Petra Vukmirovic, Head of Information Security and IT at Numan, and she also works with DevArmor on automating threat modeling and security design reviews…
- The Docker mistakes everyone's still making and how to fix them with Advait Patel · 36 minToday I'm joined by Advait Patel, Senior Site Reliability Engineer and the creator of DockSec, an open-source, AI-powered Docker security scanner that's now an official OWASP…
- Why Security Loses Influence in High-Growth Companies (And What to Do About It) with Kavia Venkatesh · 32 minToday, I'm joined by Kavia Venkatesh, Director of Product Security at a large healthcare organization. She didn't take the traditional path into cybersecurity — she came from…
- The Lethal Trifecta or why your AI agent knows too much - Jason Fernandes · 33 minToday, I’m joined by Jason Fernandes, VP of security and privacy at Mercari, the Japanese-born global marketplace now spanning e-commerce, FinTech, and crypto. It is this rare…
- Should security belong in every AI strategy meeting? with Amol Deshpande · 47 minToday, I’m joined by Amol Deshpande, a seasoned security engineer currently at Stripe, where he focuses on building secure systems at massive scale. With a background spanning…
- What Mindset Shift Developers Need to Break Into Security? with Aleksandra Kornecka · 39 minToday, I’m joined by Aleksandra Kornecka, a security engineer with a global mindset. She recently transitioned from Senior AppSec Engineer to Cloud Infrastructure Security…
- Is the AI–API interaction the biggest security blind spot? with Gowtham Sundar · 31 minToday, I’m joined by Gowtham Sundar, a Senior Lead Engineer - 3A Security (AI and API included as you can guess) at SPH Media and a seasoned AppSec leader with over a decade of…
- What best drives the adoption of secure software practices? with Enrique Larios Vargas · 38 minToday, I’m joined by Enrique Larios Vargas, a Security and Learning Specialist at Adyen. Enrique has over eight years of experience designing impactful learning and enablement…
- Why AppSec Needs More Than Just a Checkbox ⎢ Marcos Vinicius Cassel · 43 minToday, I’m joined by Marcos Vinicius Cassel, Application Security Manager at PowerSchool. With over a decade of experience in the information security space, as a CISSP, ISO…
- The Supply Chain Crisis We Created: How AI, Extensions, and Dependencies Became the New Attack Surface with Aamiruddin Syed · 41 minToday, I’m joined by Aamiruddin Syed, Senior Product Security Engineer at AGCO Corporation. Aamiruddin is the author of “Supply Chain Software Security book focusing on AI, IoT…
- Why AppSec Is breaking: Vibe Coding, DevSecOps backlogs & the new OWASP Top 10 (with Tanya Janca) · 51 minToday, I’m joined once again by Tanya Janca for her second appearance on the podcast. Her first episode was a hit, so we figured: why not record another? And the timing couldn’t…
- Secure by Design: Who’s Really Responsible? with Abhijeth Dugginapeddi · 43 minToday on the show, I’m joined by Abhijeth Dugginapeddi, Director of Offensive Security at Palo Alto Networks. Before this, he built and led product and cloud security at…
- The Pressure of Security Leadership: What SLAs Actually Work? with Terry O'Daniel · 44 minToday, I’m excited to be joined by Terry O’Daniel, former global head of security at Amplitude, Instacart, and Netflix, and a trusted advisor in the security space. Terry thrives…
- Can We Make AI Agents Smarter Than Security Teams? with Anshuman Bhartiya · 33 minToday, I’m excited to welcome Anshuman Bhartiya, an AppSec tech lead at Lyft. Before that, he worked as a security engineer at companies like Thirty Madison, Intuit, and…
- Why DevSecOps isn't enough without deep cloud context with Anjali Singh Shukla · 33 minToday I’m joined by Anjali Singh Shukla, Senior Security Engineer Cloud at Flipkart. She bridges the worlds of Cloud Security and DevSecOps, having led audits and defense…
- Decoding a Healthy Security Program: What Does "Healthy" Even Mean? with Maxwell Zhou · 41 minToday, I’m joined by Maxwell Zhou, the Founding Partner of PolarStar Cybersecurity Group, a cybersecurity firm focused on helping fintech organizations strengthen their product…
- Why SAP Security Can be a Hidden Weakness for Enterprises with Oumaima Baira · 37 minToday, I’m joined by Oumaima Baira, Directrice of Enterprise Security at Deloitte. With nearly a decade of experience, she’s helped organizations strengthen their defenses —…
- Latin America’s AppSec Culture: What’s Lost (and Found) in Translation? · 37 minToday, I’m joined by Max Alejandro Gómez-Sánchez Vergaray, Defensive Cybersecurity Manager at Banco de Crédito BCP. With a background in software engineering, Max transitioned…
- OWASP SAMM vs BSIMM: Which Maturity Model Reigns Supreme? · 46 minToday, I'm joined by Nariman Aga-Tagiyev, a seasoned cybersecurity architect and threat modeling coach, bringing over two decades of experience in the software development…
- Security Culture: When Are We Really Creating Change? with Marisa Fagan · 35 minToday, I'm joined by Marisa Fagan, a lifelong community builder and security culture enthusiast. As the Head of Product at Katilyst, Marisa leads the development of security…
