Justin Collins -- Enabling the Business to Move Faster, Securely

Justin Collins of Gusto joins Robert and Chris for a practical conversation about running security teams in an engineering-minded organization. Justin shares his experience leading product security teams, the importance of aligning security with business goals, and the challenges arising from the intersection of product security and emerging technologies like GenAI. Justin Collins currently heads up security at Gusto. In the past, he's been an AppSec engineer at SurveyMonkey, Twitter, and AT&T Interactive. He's also the primary author of Brakeman, a free static analysis security tool for Ruby on Rails. We explore security partners, GRC and privacy intersections, and the challenges that GenAI will bring to product security over the next five years.

Connect with Justin Collins:
→ The DevOps Handbook
→ Gusto

Mentioned in this episode:
→ The DevOps Handbook
→ Gusto
→ Brakeman
→ Ruby on Rails
→ Ruby
→ Content-Security-Policy (MDN)
→ The DevOps Handbook

Follow the Application Security Podcast:
➜ Home
➜ X
➜ LinkedIn
➜ YouTube
➜ Instagram
➜ Facebook

Chapters:
00:00 Meet Justin Collins: Enabling the Business to Move Faster, Securely
04:23 Rest, as they say, is history, right
08:47 Hmm. Cool, thanks. Um, Robert, why don't you take us into
12:51 What's been the response from the business to this statement where
15:50 You think it's, do you think ProdSec is easier in a
20:51 Yeah. I think that's, that's, that's, that's advice worth gold right
23:58 You mentioned a couple things, uh, that sound like good keys
26:50 Hm, So in the last, uh, I guess, number of years
31:21 Yeah. that's true. I want to give a special shout out
35:43 It SQL injection. It's vulnerable or it's not. It's, we don't
38:31 All right. So the lightning round is three questions that we
40:33 I mean, we have to end the interview now, but other
42:43 Very cool. All right. And the final one is, uh, what's
44:51 Yeah, that's true. All right. Well, Justin, how about a key