The Security Champions Podcast

Join Micheal Burch, host of The Security Champions Podcast, as he reminisces about the standout moments from this season's conversations, from unraveling the intricacies of elegant code to exploring the human side of coding.

• Welcome to The Security Champions Podcast [0:15]
• Clip 1 - What Can We Do For Our Security Champions? [18:30]
• Clip 2 - Elegant Code Leads to Better Security [26:25]
• Clip 3 - The Human Side of Security [31:22]
• Clip 4 - Gamification of Champions Programs [33:53]
• Clip 5 - Don't be 'The House of No' [39:25]
• Clip 6 - Baking Security into the Company Culture [46:09]
• Clip 7 - How to Keep Your Security Champions [51:35]
• Clip 8 - Bridging the Gap Between Security and Development [55:28]

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Podcast sponsored by Security Journey, Secure Coding Training for Developers and Everyone in the SDLC. Learn more at securityjourney.com.

FOLLOW US to stay up-to-date with new content!

• LinkedIn (linkedin.com/company/security-journey)
• Instagram (https://www.instagram.com/securityjourney)
• YouTube (youtube.com/c/securityjourney)
• Twitter (twitter.com/SecurityJourney)
• Online (securityjourney.com)
• CONTACT: [email protected]

Dustin Lehr is the Sr. Director of Platform Security at Fivetran & the Co-founder and Chief Solutions Officer at Katilyst Security. Before shifting into cybersecurity leadership, Dustin spent 13 years as a software engineer and application architect in various industries.

He joins us to discuss The Security Champion Program Success Guide and the inner workings of Fivetran's security champion program.

• Welcome to The Security Champions Podcast [0:35]
• The Security Champion Program Success Guide [12:38]
• Gamification for Learning [22:01]
• Insights from Fivetran's Program [33:10]
• What is a Security Champion? [40:30]
• Proving the ROI of Security Champions [46:11]
• Bridging the Security and Development Divide [50:02]

Episode Resources:

• The Security Champion Program Success Guide
• Let's Talk Software Security! -- An online group where Dustin and others share tips, tricks, and ideas for making DevSecOps, Shift Left, and Security By Design concepts work efficiently for organizations.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Podcast sponsored by Security Journey, Secure Coding Training for Developers and Everyone in the SDLC. Learn more at securityjourney.com.

FOLLOW US to stay up-to-date with new content!

• LinkedIn (linkedin.com/company/security-journey)
• Instagram (https://www.instagram.com/securityjourney)
• YouTube (youtube.com/c/securityjourney)
• Twitter (twitter.com/SecurityJourney)
• Online (securityjourney.com)
• CONTACT: [email protected]

Irfaan Santoe is the leader of the OWASP Netherlands chapter and the creator of the OWASP Security Champions Guide. He is passionate about scaling security in AppDev, DevOps, and Cloud and has helped numerous multinationals solve information security challenges.

In this episode of The Security Champions Podcast, Irfaan walks through the Security Champion Program Guide. He shares the motivation behind the project, what makes this guide different, how security champions can affect real change, and more!

[0:05] Welcome to The Security Champions Podcast
[14:13] The Motivation Behind the OWASP Security Champions Guide
[18:02] How To Get Buy-In for a New OWASP Project
[21:28] Why the Champions Guide is Different
[28:26] How To Make Everyone a Security Champion
[32:49] Engineers are Part of the Security Team
[37:52] Facilitating Behavioral Change
[41:02] How Security Champions Bring the Community Together
Episode Resources:

• OWASP Security Champions Guide - https://owasp.org/www-project-security-champions-guidebook/

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Podcast sponsored by Security Journey, Secure Coding Training for Developers and Everyone in the SDLC. Learn more at securityjourney.com.

FOLLOW US to stay up-to-date with new content!

• LinkedIn (linkedin.com/company/security-journey)
• Instagram (https://www.instagram.com/securityjourney)
• YouTube (youtube.com/c/securityjourney)
• Twitter (twitter.com/SecurityJourney)
• Online (securityjourney.com)
• CONTACT: [email protected]

Phillip Maddux is the founder of Deception Logic and a Staff Engineer on the Detection Engineering and Response Automation team at Compass. With close to two decades of experience in information and application security, Phillip's passion for honeypots led him to develop HoneyDB.io and his company, Deception Logic.
In this episode of The Security Champions Podcast, Phillip explained the world of deception technology and its evolving role in cybersecurity. From high-fidelity honeypots to detecting insider threats, the conversation dives into how these tools can mislead attackers while protecting critical systems.
Podcast Chapters:
0:05 Welcome to the Security Champions Podcast
10:30 What is Deception Technology?
15:12 High-Fidelity Honeypots
21:07 Detecting Insider Threats
28:13 The Ethics of 'Poison'
32:30 AI's Space in Deception Technology
36:15 Deception in 5 Years

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Podcast sponsored by Security Journey, Secure Coding Training for Developers and Everyone in the SDLC. Learn more at securityjourney.com.

FOLLOW US to stay up-to-date with new content!

• LinkedIn (linkedin.com/company/security-journey)
• Instagram (https://www.instagram.com/securityjourney)
• YouTube (youtube.com/c/securityjourney)
• Twitter (twitter.com/SecurityJourney)
• Online (securityjourney.com)
• CONTACT: [email protected]

Adam Bruehl, a Senior DevOps Engineer at Security Journey, has a unique blend of expertise ranging from biology to technology.

In this episode, Adam dives into the intersection of cybersecurity and medical devices, pharmaceutical research, and patient data. Hear first-hand accounts of security incidents, ethical dilemmas, and the constant battle to balance cutting-edge technology with outdated protocols in an industry where the stakes are life and death.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Podcast sponsored by Security Journey, Secure Coding Training for Developers and Everyone in the SDLC. Learn more at securityjourney.com.

FOLLOW US to stay up-to-date with new content!

• LinkedIn (linkedin.com/company/security-journey)
• Instagram (https://www.instagram.com/securityjourney)
• YouTube (youtube.com/c/securityjourney)
• Twitter (twitter.com/SecurityJourney)
• Online (securityjourney.com)
• CONTACT: [email protected]