Robyn Lundin -- Planning & organizing a penetration test as an AppSec team

Robyn Lundin started working in tech after a coding boot camp as a developer for a small startup. She then discovered her passion for security, pivoted into pentesting for NCC Group, and now works as a Senior Product Security Engineer for Slack. Robyn joins us to discuss the role of penetration testing within the application security realm. Robyn provides actionable guidance that you can apply directly to your application pen testing program. We hope you enjoy this conversation with Robyn London. The conversation connects NCC Group, Slack, OWASP Juice Shop to practical choices that application security teams can make in their own programs.

The Application Security Podcast is brought to you by Security Journey.

About Security Journey
We help enterprises reduce vulnerabilities through application security education for developers and everyone in the SDLC.
→ Learn more about Security Journey

Connect with Robyn Lundin:
→ NCC Group
→ Slack

Mentioned in this episode:
→ NCC Group
→ Slack
→ OWASP Juice Shop

Follow the Application Security Podcast:
➜ Home
➜ X
➜ LinkedIn
➜ YouTube
➜ Instagram
➜ Facebook

Chapters:
00:00 Meet Robyn Lundin: Planning & organizing a penetration test as an AppSec team
03:37 Very, very cool. And that's, you know, one of the things
05:59 Very cool. And mentorship is such an important thing for us
07:17 Great advice. So Robyn, as we get started today in talking
08:55 To kind of dive into the deep end of our penetration
13:27 Yeah. So you mentioned low-hanging fruit, and I guess that's always
17:37 I've been away from pen testing for a long, long, long
20:16 Frequency. So let's say we have 1,000 apps. Do we test
22:07 Yeah, and just to let the record show, I think we
24:57 Would that also apply to, so if we had internal resources
26:48 Very good. So if you would, Robyn, just sort of wrapping