Dr. Jared Demott -- Cloud Security & Bug Bounty

Chris and Robert are thrilled to have an insightful conversation with Dr. Jared Demott, a seasoned expert in the field of cybersecurity. The discussion traverses a range of topics, from controversial opinions on application security to the practical aspects of managing bug bounty programs in large corporations like Microsoft. Hey folks, we're thrilled to welcome Dr. Jared DeMott, a cybersecurity veteran who started his journey at the NSA and has since made significant contributions to the world of AppSec. From teaching at renowned conferences and universities to leading successful startups focused on malware, monitoring, and pen testing, Jared's done it all. Currently, he's making waves at Microsoft, leading a team dedicated to safeguarding products and customers by transforming bug bounty reports into crucial fixes for cloud services.

The Application Security Podcast is brought to you by Security Journey.

About Security Journey
Hey folks, we're thrilled to welcome Dr.
→ Learn more about Security Journey

Connect with Jared Demott:
→ Microsoft Security Response Center (MSRC)
→ Content-Security-Policy (MDN)

Mentioned in this episode:
→ Microsoft Security Response Center (MSRC)
→ Content-Security-Policy (MDN)

Follow the Application Security Podcast:
➜ Home
➜ X
➜ LinkedIn
➜ YouTube
➜ Instagram
➜ Facebook

Chapters:
00:00 Introduction and Background
03:06 Dr. Jared DeMott's Journey into Cybersecurity
10:46 The Role at Microsoft and the Bug Bounty Program
14:52 The Top Vulnerabilities in Cloud and Online Services
35:37 The Labor Shortage in Cybersecurity: A Hot Take
42:14 Conclusion and Key Takeaways