Building AppSec from Existing Practices with Andrew Wheatley (Tayko)

Build Amazing Things (securely)

In this episode of "Build Amazing Things Securely," host Laura Bell Main sits down with Andrew from Teko. Andrew shares his journey from software development to application security, highlighting his burnout experience and subsequent career pivot. He discusses the importance of understanding and integrating into teams' existing processes, using techniques like Rosebud Thorn for cultural and security growth. Andrew emphasizes learning from mistakes, the value of different perspectives in AppSec, and the future direction of the field.

Key Points:

1. Andrew's Background: Transition from software development to a focus on data analytics and application security.
2. Burnout and Recovery: Andrew's experience with burnout and how it reshaped his career focus towards people and helping others.
3. Integrating Security into Development: Strategies for seamlessly integrating security measures into existing software development processes.
4. Rose Bud Thorn Technique: Utilizing this method for understanding team dynamics and improving security culture.
5. Future of AppSec: Andrew's insights into the evolving role of application security as a facilitator and enabler within development teams.

Homework (Recommended Actions):

1. Reflect on Team Processes: Use the Rosebud Thorn technique to identify areas of strength, growth, and challenges within your team.
2. Learn from Mistakes: Encourage a culture where making and learning from mistakes is valued.
3. Adopt User-Centric Security: Consider how security measures impact the end user and integrate them thoughtfully into your development process.
4. Stay Informed: Keep up with the evolving trends in application security to remain effective and relevant in your field.

Relevant Links:

• https://easyretro.io/templates/rose-bud-thorn/
• https://tayko.io/
• https://www.linkedin.com/in/andrew-wheatley-55247225/