34 minvideo
Loren Kohnfelder -- Designing Secure Software
Loren Kohnfelder has over 20 years of experience in the security industry. At Microsoft, he was a key contributor to STRIDE, the industry’s first formalized…
Listen to the episodeEpisodes, page 6
304 episodes, going back to 2016. Showing 121–144.
36 min
Ochaun Marshall -- IaC and SAST
Ochaun Marshall is an Application Security Consultant. In his roles of secure ideas, he works on on-going development projects utilizing Amazon web services…
Listen to the episode40 minvideo
Simon Bennetts -- Using OWASP Zap across an Enterprise
Simon Bennetts is the OWASP Zed Attack Proxy (ZAP) Project Leader and a Distinguished Engineer at StackHawk, a company that uses ZAP to help users fix…
Listen to the episode32 minvideo
Timo Pagel -- DevSecOps Maturity Model
Timo Pagel has been in the IT industry for over fifteen years. After a system administrator and web developer career, he advises customers as a DevSecOps consultant and trainer.
Listen to the episode33 minvideo
Mazin Ahmed -- Terraform Security
Mazin Ahmed is a security engineer that specializes in AppSec and offensive security.
Listen to the episode54 min
James Ransome and Brook Schoenfield -- trust and verify: Building in Security at Agile Speed
Dr. James Ransome is the Chief Scientist for CyberPhos, an early-stage cybersecurity startup.
Listen to the episode30 minvideo
OWASP Top 10 2021 Peer Review
Robert and I break down the OWASP Top 10 2021 Peer Review Edition. We walk through and give you our insights and highlights of the things that stand out to us and our questions.
Listen to the episode34 minvideo
Anastasiia Voitova -- Encryption is easy, key management is hard
Anastasiia Voitova is the Head of customer solutions and a security software engineer at Cossack Labs. She works on data security and encryption tools and their integration into the real world apps.
Listen to the episode36 minvideo
Eran Kinsbruner -- DevSecOps Continuous Testing
Eran Kinsbruner is the Chief Evangelist and Senior Director at Perforce Software. His published books include the 2016 Amazon bestseller, “The Digital…
Listen to the episode36 min
Mark Loveless -- Threat modeling in a DevSecOps environment.
Mark Loveless - aka Simple Nomad - is a security researcher and hacker. He's spoken at numerous security and hacker conferences worldwide, including Blackhat, DEF CON, ShmooCon, and RSA.
Listen to the episode32 min
Jeroen Willemsen -- Security automation with ci/cd
Jeroen Willemsen is a Principal Security Architect at Xebia. Jeroen is more or less a jack of all trades with an interest in infrastructure security, risk management, and application security.
Listen to the episode1 hr 12 minvideo
Thinking back, Looking forward - A Balanced Approach to Securing our Software Future
Kevin Greene is the Director of Security Solutions at Parasoft and has extensive experience and expertise in software security, cyber research and development, and DevOps.
Listen to the episode36 minvideo
Jeevan Singh -- Threat modeling based in democracy
Jeevan Singh is a Security Engineer Manager at Segment, where he is embedding security into all aspects of the software development process.
Listen to the episode39 minvideo
Dima Kotik -- Application Security and the Zen of Python
Dima Kotik is an Application Security Engineer at Security Journey and has been programming in Python for years.
Listen to the episode37 minvideo
Dustin Lehr -- Advocating and being on the side of developers
Before taking the plunge into information security leadership, Dustin Lehr spent over a decade as a software engineer and architect in a variety of…
Listen to the episode49 minvideo
Aaron Rinehart -- Security Chaos Engineering
Aaron Rinehart is expanding the possibilities of chaos engineering to cybersecurity.
Listen to the episode50 minvideo
Izar Tarandach and Matt Coles-- Threat Modeling: A Practical Guide for Development Teams
In this episode of the Application Security Podcast, we're joined by friends Izar and Matt, authors of the book "Threat Modeling: A Practical Guide for…
Listen to the episode36 min
Charles Shirer -- The most positive person in security
Charles is a Senior Security Consultant for Red Siege. He has over 18 years of experience in IT.
Listen to the episode46 min
Leif Dreizler -- Tactical tips to shift engineering right
Leif Dreizler is the manager of the Product Security team at Segment. Leif got his start in the security industry at Redspin doing security consulting work…
Listen to the episode24 min
Vandana Verma -- OWASP Spotlight Series
Vandana Verma is the President of Infosec girls and Infosec Kids, a board of directors member for OWASP, and a leader for BSides Dehli. She joins us to introduce the OWASP Spotlight Series.
Listen to the episode49 minvideo
Dr. Anita D’Amico -- Do certain types of developers or teams write more secure code?
Dr. Anita D’Amico is the CEO of Code Dx, which provides Application Security Orchestration and Correlation solutions to industry and government.
Listen to the episode40 minvideo
Alyssa Miller -- Bringing security to DevOps and the CI/CD pipeline
Alyssa Miller is a life-long hacker, security advocate, and cybersecurity leader. She is the BISO for S&P Global ratings and has over 15 years of experience in security roles.
Listen to the episode42 min
Liran Tal — Cloud native application security, what’s a developer to do?
Liran Tal is an application security activist and long-time proponent of open-source software.
Listen to the episode28 minvideo
Chris Romeo — DevSecOps Fails
For this episode, Robert and I decided to talk about an article I wrote called "DevOps security culture: 12 fails your team can learn from". We hope you enjoy this walkthrough of the 12 fails.
Listen to the episode