James Mckee -- Developer Security

James Mckee is a developer (MCPDEA) and security advocate (CISSP) whose biggest responsibility is leading developer security practices. He sets the standards and procedures for the practice's operations and leads all client engagement efforts concerning security. He also takes the lead in ensuring that company staff (developers specifically) are properly trained and following best practices concerning application security. Currently, he is responsible for training and providing product guidance for developers worldwide. James joins us to discuss offensive application security for developers. We also get into the role of security professionals in reaching developers outside of the security echo chamber. We hope you enjoy this conversation with... The Application Security Podcast is brought to you by Security Journey. → https://www.securityjourney.com/ About Security Journey James McKee is a developer, MCP-DEA, and a security advocate, CISSP, whose biggest responsibility is leading developer security practices. Learn more about Security Journey: → https://www.securityjourney.com/ Connect with James Mckee: → Applied Cryptography: https://www.schneier.com/books/applie... → AppSec Village: https://appsecvillage.com Chapters: 00:00 Meet James Mckee: Developer Security 02:03 Yeah, and it's been, I don't know, 6 weeks, 2 months 07:15 Yeah, we hear that a lot in AppSec people. A lot 10:45 Great experience for me too. So I did a threat modeling 13:03 Yeah. Yeah. Let's, let's call an audible on our plan here 20:26 Which is not a great thing. And I remember one example 25:56 Are they training that 28:51 About, so you're talking about training the junior developers, but what 29:58 Right 32:07 We kind of went off on a bit of a tangent 35:02 Yeah, GitHub says there's 26 million developers on Earth right now Follow the Application Security Podcast: ➜Home: https://appsecpodcast.com ➜Twitter: https://x.com/AppSecPodcast ➜LinkedIn:   / application-security-podcast   ➜Instagram:   / appsecpodcast   ➜Spotify: https://open.spotify.com/show/5wB4EQz... ➜Apple: https://podcasts.apple.com/us/podcast... #AppSec #Developer #Security #ApplicationSecurity