Harshil Parikh -- Deep Environmental and Organizational Context in Application Security

Harshil Parikh is a seasoned security leader with experience building security and compliance functions from the ground up. He notably built the security and compliance team at Medallia from scratch and led it through several transitions. He is also a conference speaker, and, most recently, he co-founded Tromzo. Harshil shares insights about AppSec, running a startup, selling effectively, and provides justification for his mantra, "Context is king. Scaled the team globally, achieved compliance, SOC 2 ISO FedRAMP, went through an IPO, And secured seven mergers and acquisitions. Additionally, he's been a speaker at RSA Conference, AppSec USA, and CSX Europe. Harshil joins us to discuss developer first security, developer autonomy and guardrails, and challenges scaling AppSec programs.

Connect with Harshil Parikh:
→ The Metrics Manifesto by Richard Seiersen
→ Tromzo

Mentioned in this episode:
→ The Metrics Manifesto by Richard Seiersen
→ Tromzo

Follow the Application Security Podcast:
➜ Home
➜ X
➜ LinkedIn
➜ YouTube
➜ Instagram
➜ Facebook

Chapters:
00:00 Meet Harshil Parikh: Deep Environmental and Organizational Context in Application Security
01:56 Yeah, that's good. That's, that's, uh, it's a good challenge or
04:47 Let's dive in a little bit to some of the work
06:57 What's your approach to get in front of the right people
10:35 It's a long, it's definitely a long term thing and that's
14:46 Mean, you don't really have to worry about having a good
20:42 Particular pushback did you get on that
23:30 Yeah, I was wondering about that in terms of guardrails. I
26:41 Does governance play in to that scaling problem that you just
33:49 There we go. All right, Harjul. Uh, so, first question is
35:06 Yeah. So, um, the next one we have is, uh, what