Joshua Wells -- Application Security in the Age of Zero Trust

What is zero trust, and how does it impact the world of applications and application security? We dive deep into zero trust with Joshua Wells, a seasoned cybersecurity expert with over ten years of experience. Joshua explores the intricacies of zero trust, a cybersecurity model that dictates no user or machine is trusted by default and must be authenticated every time. Joshua Wells is a seasoned cybersecurity expert with over 10 years of experience leading teams and organizations through intricate cybersecurity situations. His extensive background includes working with various government bodies and private sector organizations, specializing in areas such as architectural security, endpoint detection, mobile device management, and risk assessment.

The Application Security Podcast is brought to you by Security Journey.

About Security Journey
Joshua Wells is a seasoned cybersecurity expert with over 10 years of experience leading teams and organizations through intricate cybersecurity situations.
→ Learn more about Security Journey

Connect with Joshua Wells:
→ BeyondCorp
→ CISA Zero Trust Maturity Model

Mentioned in this episode:
→ BeyondCorp
→ CISA Zero Trust Maturity Model
→ NIST SP 800-53
→ Zscaler
→ LogRhythm
→ Sumo Logic
→ DISA STIG
→ OWASP Top 10
→ OWASP API Security Top 10
→ Cyber Vault Solutions

Follow the Application Security Podcast:
➜ Home
➜ X
➜ LinkedIn
➜ YouTube
➜ Instagram
➜ Facebook

Chapters:
00:00 Meet Joshua Wells: Application Security in the Age of Zero Trust
02:59 How'd you get into security
06:18 As we were talking before the interview, I have to add
07:16 Like Superman, what was his name
10:51 With zero trust then, I primarily think of network architecture is
14:53 Everything is internet accessible. Everything is public IP addressable. All the
18:08 Back to the regularly scheduled programming here. When you think about
20:38 Thinking through that a little bit, for an organization when they've
23:10 All right, so we talked about the positive side. I mean
25:58 Yeah, and I've seen similar, and you probably have too, in
28:37 We think about areas of focus that an AppSec person should
32:14 As I'm listening to you talk about applications in a zero
35:24 In the deep end of the zero trust pool, what would
37:15 As far as a call to action, so let's just assume