“Literally building an application security program from zero, as like my first full-time security job”

Transcript evidence from François Proulx -- Actionable Software Supply Chain Security.