Harshil Parikh -- Deep Environmental and Organizational Context in Application Security

Harshil Parikh is a seasoned security leader with experience building security and compliance functions from the ground up. He notably built the security and compliance team at Medallia from scratch and led it through several transitions. He is also a conference speaker, and, most recently, he co-founded Tromzo. Harshil shares insights about AppSec, running a startup, selling effectively, and provides justification for his mantra, "Context is king. Scaled the team globally, achieved compliance, SOC 2 ISO FedRAMP, went through an IPO, And secured seven mergers and acquisitions. Additionally, he's been a speaker at RSA Conference, AppSec USA, and CSX Europe. Harshil joins us to discuss developer first security, developer autonomy and guardrails, and challenges scaling AppSec programs.Connect with Harshil Parikh:→ The Metrics Manifesto by Richard Seiersen→ TromzoMentioned in this episode:→ The Metrics Manifesto by Richard Seiersen→ TromzoFollow the Application Security Podcast:➜ Home➜ X➜ LinkedIn➜ YouTube➜ Instagram➜ FacebookChapters:00:00 Meet Harshil Parikh: Deep Environmental and Organizational Context in Application Security01:56 Yeah, that's good. That's, that's, uh, it's a good challenge or04:47 Let's dive in a little bit to some of the work06:57 What's your approach to get in front of the right people10:35 It's a long, it's definitely a long term thing and that's14:46 Mean, you don't really have to worry about having a good20:42 Particular pushback did you get on that23:30 Yeah, I was wondering about that in terms of guardrails. I26:41 Does governance play in to that scaling problem that you just33:49 There we go. All right, Harjul. Uh, so, first question is35:06 Yeah. So, um, the next one we have is, uh, what