Episodes

Developers and security training: can they co-exist?⎜Laura Bell Main 29.02.2024 33:23

Welcome to the Elephant in AppSec, the podcast to explore, challenge, and boldly face the AppSec Elephants in the room. Today, we’re excited to have an amazing guest, Laura Bell Main, join us. With over 20 years in software development and application security, Laura is the co-founder and CEO of SafeStack, an online education platform that offers secure development training for fast-moving compani...

Adversarial machine learning: what is it and are we ready? ⎜Anmol Agarwal 23.02.2024 37:31

Welcome to the Elephant in AppSec, the podcast to explore, challenge, and boldly face the AppSec Elephants in the room. Today we’re excited to have an amazing guest, Anmol Agarwal, join us. Anmol is a security researcher at Nokia, focused on securing AI and Machine Learning in 6G and securing 5G. She also holds a doctoral degree in cybersecurity analytics from George Washington University. Her re...

AppSec vendors and CISOs: a love - hate relationship? ⎜Olivia Rose 15.02.2024 52:30

Welcome to the Elephant in AppSec, the podcast to explore, challenge, and boldly face the AppSec Elephants in the room. Today, we're joined by an amazing guest, Olivia Rose. You can find Olivia on LinkedIn: https://www.linkedin.com/in/oliviaros... Olivia is an executive leader with more than 20 years of dedicated experience, having served as the former CISO at Amplitude and Mailchimp and curre...

Pentesting: What are the actual benefits?⎥Harsh Modi 08.02.2024 54:55

Welcome to the Elephant in AppSec, the podcast to explore, challenge, and boldly face the AppSec Elephants in the room. Today, we're joined by an amazing guest, Harsh Modi. You can find Harsh on LinkedIn: https://www.linkedin.com/in/neighborhoodpenetrationtester/ With over 8 years of dedicated experience as an Offensive Security Engineer and Penetration Tester, Harsh has honed an exceptional s...

Security champion program: A must or completely useless? ⎥Dustin Lehr 01.02.2024 45:38

Welcome to the Elephant in AppSec, the podcast to explore, challenge, and boldly face the AppSec Elephants in the room. Today, we're joined by an amazing guest, Dustin Lehr. You can find Dustin on LinkedIn: https://www.linkedin.com/in/dustinlehr/ Dustin is an accomplished software engineer turned information security leader, currently serving as Senior Director of Platform Security / Deputy CI...

Is Gen AI your new AppSec weapon? 26.01.2024 35:04

Welcome to the Elephant in AppSec, the podcast to explore, challenge, and boldly face the AppSec Elephants in the room. Today, we're joined by an amazing guest, Sandesh Mysore Anand. You can find Sandesh on LinkedIn: https://www.linkedin.com/in/anandsandesh/ With more than 12 years of experience in security and working as a head of security at Razorpay, India's leading financial platform f...

Security training: Necessary investment or overrated expense?⎥Mel Reyes 26.01.2024 48:24

Welcome to the Elephant in AppSec, the podcast to explore, challenge, and boldly face the AppSec Elephants in the room. Today we’re excited to have an amazing guest, Mel Reyes, joining us. Mel has navigated through two IPOs, three M&As, worked with several startups, Pepsi, Mercedes, and accumulated a bunch of patents along the way. With more than 30 years of experience in various leadership, a...

What is ASPM: A breakdown of the current state and its future 11.01.2024 40:21

Welcome to the Elephant in AppSec, the podcast to explore, challenge, and boldly face the AppSec Elephants in the room. Today, we're joined by an amazing guest, James Berthoty. James has been in technology for over 10 years across engineering and security. An early advocate for DevSecOps, he has a passion for driving security teams as contributors to products. With all his experience, he's...

SCADA systems: How secure are the systems running our infrastructure? ⎥Malav Vyas 04.01.2024 27:41

Today, we're excited to have an amazing guest, Malav Vyas, joining us. Malav is a security researcher at Palo Alto Networks, passionate about exploiting and securing systems. Security research is an important part of our day-to-day at Escape. That's why we were very curious when Malav reached out to us and brought up the topic of SCADA systems. In our latest episode with Tristan Kalos, we...

Threat modeling: the future of cybersecurity or another buzzword⎥Derek Fisher 21.12.2023 51:21

Today we’re excited to have an amazing guest, Derek Fisher, joining us. Derek is a cybersecurity leader, a speaker on various cybersecurity topics and author of the famous “The Application Security Handbook.” Having been a developer before shifting to application security more than a decade ago, Derek has had the unique opportunity of seeing the industry from the perspective of someone who build...

Security experience: top-down vs bottom-up⎥Jeevan Singh (Rippling, Twilio) 13.12.2023 47:42

Today we’re excited to have an amazing guest, Jeevan Singh, Senior Staff Security Engineer at Rippling, joining us. Jeevan is responsible for a wide variety of tasks, including architecting security solutions and working with development teams to resolve security vulnerabilities. With over 15 years of experience in various development and leadership roles, he enjoys building security culture with...

Lack of effective DAST tools⎥Aleksandr Krasnov (Meta, Thinkific, Dropbox) 30.11.2023 43:03

Today, we're revealing our first episode with Aleksandr Krasnov, the principal security engineer at Meta, who challenges the effectiveness of existing DAST tools with us. Aleksandr Krasnov is the principal security engineer at Meta, responsible for all things security at Instagram and WhatsApp. Previously, he was responsible for AppSec and offensive security at Thinkific and served as a produc...

The Elephant in AppSec Podcast Trailer | Escape 29.11.2023 1:03

Welcome to the Elephant in AppSec, the podcast to explore, challenge, and boldly face the AppSec Elephants in the room. Tomorrow, we're revealing our first episode with Aleksandr Krasnov, the principal security engineer at Meta, who challenges the effectiveness of existing DAST tools with us. In the upcoming weeks, we'll share even more interviews with world-class security experts that add...