Dr. Jared Demott -- Cloud Security & Bug Bounty

Chris and Robert are thrilled to have an insightful conversation with Dr. Jared Demott, a seasoned expert in the field of cybersecurity. The discussion traverses a range of topics, from controversial opinions on application security to the practical aspects of managing bug bounty programs in large corporations like Microsoft. Hey folks, we're thrilled to welcome Dr. Jared DeMott, a cybersecurity veteran who started his journey at the NSA and has since made significant contributions to the world of AppSec. From teaching at renowned conferences and universities to leading successful startups focused on malware, monitoring, and pen testing, Jared's done it all. Currently, he's making waves at Microsoft, leading a team dedicated to safeguarding products and customers by transforming bug bounty reports into crucial fixes for cloud services.The Application Security Podcast is brought to you by Security Journey.About Security JourneyHey folks, we're thrilled to welcome Dr.→ Learn more about Security JourneyConnect with Jared Demott:→ Microsoft Security Response Center (MSRC)→ Content-Security-Policy (MDN)Mentioned in this episode:→ Microsoft Security Response Center (MSRC)→ Content-Security-Policy (MDN)Follow the Application Security Podcast:➜ Home➜ X➜ LinkedIn➜ YouTube➜ Instagram➜ FacebookChapters:00:00 Introduction and Background03:06 Dr. Jared DeMott's Journey into Cybersecurity10:46 The Role at Microsoft and the Bug Bounty Program14:52 The Top Vulnerabilities in Cloud and Online Services35:37 The Labor Shortage in Cybersecurity: A Hot Take42:14 Conclusion and Key Takeaways