From Code to Cybersecurity: A Deep Dive into Open Source, Encryption, and Leadership with Edwin Kwan

Formerly a software engineer, today Edwin Kwan is Head of Application Security and Advisory at Tyro Payments. Edwin is also a contributing journalist to the It’s 5:05 Podcast, which highlights cybersecurity and open source software news. Host Cole Cornford chats with Edwin about transitioning from focusing on the nitty gritty challenges of an engineer to the very different challenges of overseeing a team, the importance of due diligence when using open source software, the pros and cons of end to end encryption, and plenty more.Secured by Galah Cyber with Cole Cornford website 2:55 - Importance of listening.3:50 - Edwin’s current role.4:28 - A recent news story: end to end encryption & Google.7:30 - Unintended results from security decisions.8:38 - Security about making "an informed risk decision."9:50 - Edwin’s background and career trajectory.12:50 - The challenges of doing intangible work vs. work you can see the tangible impact of in the real world.13:30 - Edwin: "Changing from a technical challenge to a people and culture challenge," i.e., going from a technical role to a manager role.15:50 - Cole: Would you want to go back to a technical role?18:30 - Edwin: In security, there’s this idea that security is a blocker.20:30 - Edwin: "What you know today is obsolete in 11 months."23:40 - Cole: I think AI is a really good example of security not having a proactive mindset.25:00 - Edwin: Security team always chasing its tail.26:30 - Cole: I always worry when cybersecurity teams advocate for having more money.27:30 - Edwin: Security is seen as a "cost centre," not revenue generation.30:30 - Advice for young people wanting to enter the industry/tech more generally.32:40 - Rapid fire questions.35:50 - Edwin’s favourite book to recommend: How To Win Friends and Influence People.37:30 - Edwin’s 1 piece of advice: "Look at your open source supply chain."Mentioned in this episode:Call for FeedbackThis podcast uses the following third-party services for analysis: Podtrac - https://analytics.podtrac.com/privacy-policy-gdrpSpotify Ad Analytics - https://www.spotify.com/us/legal/ad-analytics-privacy-policy/