Security Journey

Director of Application Security Advocacy

Headshot for Dustin Lehr from PPWorks

<body>
In application security, recognizing threats is just the beginning. Real success requires choosing the right tools, adopting effective methodologies, and integrating security practices into development gates across the software development lifecycle — from “shift left” early-stage strategies to “shift right” monitoring post-deployment. As these elements converge, a challenge for security leaders emerges: designing a resilient, practical program that adapts to new challenges while consistently prioritizing and mitigating real-world risks.



Mic McCully of Oligo Security will lead the panel discussion. He’ll be joined by experts Dustin Lehr, Sr. Director of Platform Security at Fivetran, and Naor Penso, Head of Product Security at FICO.



During the session, we’ll dive into:



<ol class="wp-block-list">
<li>Alert Overload and False Positives: The struggle of sifting through overwhelming alerts, discerning genuine threats from a sea of false positives, and the implications of both.</li>



<li>Understanding Reachability: Delving into core considerations that define ‘reachability’ in application security, weighing the insights derived from both pre-deployment and post-deployment evaluations.</li>



<li>Shaping a Proactive Culture: Transitioning from reactive measures to proactive teamwork. Overcoming trust barriers by fostering and empowering security champions within development teams, ensuring security becomes a shared responsibility.</li>
</ol>



Sponsored by:



<figure class="wp-block-image size-full"><img loading="lazy" decoding="async" width="350" height="175" src="https://files.cyberriskalliance.com/wp-content/uploads/2023/11/Oligo.jpeg" alt="" class="wp-image-681914" srcset="https://image-optimizer.cyberriskalliance.com/unsafe/fit-in/300x150/smart/files.cyberriskalliance.com/wp-content/uploads/2023/11/Oligo.jpeg 300w, https://files.cyberriskalliance.com/wp-content/uploads/2023/11/Oligo.jpeg 350w" sizes="auto, (max-width: 350px) 100vw, 350px" /></figure>
</body>

Application security

Cybercast

Archived: Implementing a Practical AppSec Program: Expert Insights on Strategy & Execution

<body>
As cybersecurity threats evolve, secure software development is no longer a nice-to-have—it’s a necessity. Yet many organizations still treat secure coding as a compliance checkbox rather than a core competency. With generative AI enabling more sophisticated attacks, ransomware surging, and new regulatory mandates taking shape, security leaders must rethink how they prepare development teams for a rapidly shifting threat landscape.



This SC Media panelcast, sponsored by Security Journey, brings together secure development experts and AppSec leaders to explore what it takes to embed lasting, secure coding behaviors across the software lifecycle. You’ll hear from experts on why developer-first training is key, how to tailor learning paths that actually stick, and what forward-looking teams are doing to stay ahead of new risks in 2025 and beyond.
</body>

Attendees will learn: 
<ul>
<li>How generative AI, PCI DSS v4.0, and emerging regulations are reshaping secure coding requirements—and how to respond</li>
<li>What makes developer-first training effective, and how to assess and assign the right content for every role</li>
<li>Practical steps for building a culture of security that reduces human error, resists ransomware, and scales with your team</li>
</ul>

Archived: Code or Be Conquered: Preparing Developers for Cyber Threats in the Age of AI

<body>
AI is rapidly changing the software security landscape, enabling faster code reviews, smarter testing, and greater visibility into risk. But the question is not if you will use AI to scale security, it is how. The organizations leading this shift are the ones combining AI-driven insight with a human-first culture of secure development.



Join SC Media and Security Journey experts for a practical exploration of how to operationalize AI-assisted security programs that empower both leaders and developers to move faster, smarter, and more securely.



See how to turn AI potential into measurable progress and build a culture where people and technology work together to deliver secure software at scale.
</body>

Attendees will learn:
<ul>
<li>How AI is transforming secure development workflows, from code scanning to education, and where it truly drives ROI.</li>
<li>What it takes to align developer enablement, security training, and AI adoption into a cohesive strategy.</li>
<li>Ways to measure the impact of AI-assisted security programs and communicate value across technical and executive teams.</li>
</ul>