James Mckee -- Developer Security

James Mckee is a developer (MCPDEA) and security advocate (CISSP) whose biggest responsibility is leading developer security practices. He sets the standards and procedures for the practice's operations and leads all client engagement efforts concerning security. He also takes the lead in ensuring that company staff (developers specifically) are properly trained and following best practices concerning application security. Currently, he is responsible for training and providing product guidance for developers worldwide. James joins us to discuss offensive application security for developers. We also get into the role of security professionals in reaching developers outside of the security echo chamber. We hope you enjoy this conversation with...

The Application Security Podcast is brought to you by Security Journey.

About Security Journey
James McKee is a developer, MCP-DEA, and a security advocate, CISSP, whose biggest responsibility is leading developer security practices.
→ Learn more about Security Journey

Connect with James Mckee:
→ Applied Cryptography
→ AppSec Village

Mentioned in this episode:
→ Applied Cryptography
→ AppSec Village
→ DEF CON
→ Start with Why
→ Stack Overflow
→ Information Security Stack Exchange
→ ChatGPT
→ GitHub Copilot
→ OWASP Top 10
→ OWASP ASVS
→ OWASP Proactive Controls
→ OWASP Cheat Sheet Series
→ BSides Boulder
→ OWASP Cheat Sheet Series

Follow the Application Security Podcast:
➜ Home
➜ X
➜ LinkedIn
➜ YouTube
➜ Instagram
➜ Facebook

Chapters:
00:00 Meet James Mckee: Developer Security
02:01 Yeah, and it's been, I don't know, 6 weeks, 2 months
07:13 Yeah, we hear that a lot in AppSec people. A lot
10:43 Great experience for me too. So I did a threat modeling
13:01 Yeah. Yeah. Let's, let's call an audible on our plan here
20:24 Which is not a great thing. And I remember one example
25:54 Are they training that
28:49 About, so you're talking about training the junior developers, but what
29:56 Right
32:05 We kind of went off on a bit of a tangent
35:00 Yeah, GitHub says there's 26 million developers on Earth right now