More Role Models in AppSec: How to Get It Right
summary
After 100+ interviews the claim is clear: AppSec fails more from human gaps than tooling, and visibility fixes work better than more scanners. Data points: 100+ interviews, 22% women on security teams from ISACA, and only 6 of 100 CFPs from women at local events. Practical interventions that work: recruit via DMs and local groups, sponsor people by using your reputation, spotlight internal wins, and publish postmortems about how trust with engineering was rebuilt β those steps produce speakers, hires, and measurable career lifts.
AI-written summary Β· about
chapters (11)
- 0:00Introduction and speaker intro
- 0:41Why AppSec struggles with humans
- 3:08The trust gap in AppSec teams
- 5:37Diversity gap in AppSec
- 7:43AppSec archetypes and role models
- 10:11Soft skills vs technical skills
- 12:00Role models vs mentors vs sponsors
- 13:44Visibility as a resource
- 16:13Creating external visibility
- 19:04Building internal role models
- 21:12Call to action and conclusion
related talks
56mInclusive security: Building diverse teams for stronger defenses
17mWhy you fail at Application Security - and how to fix it
31mTopics of Interest: Scaling AppSec through Education
47mSecurity is Everybody's Job
46mWomen...
37mHow to get developers to want to adopt AppSec
40mInfosec Makeover: Love it or Leave it, Product Security is Here to Stay
49mWomen in Information Security