Jeevan Singh -- Threat modeling based in democracy

Jeevan Singh is a Security Engineer Manager at Segment, where he is embedding security into all aspects of the software development process. Jeevan enjoys building security culture within organizations and educating staff on security best practices. Before life in the security space, Jeevan had a wide variety of development and leadership roles over the past 15 years. Jeevan joins us to speak about self-serve threat modeling at Segment or threat modeling based in democracy. We discuss their focus with the program, how it fits in their dev methodology and their ultimate goal with the threat modeling program. We hope you enjoy this conversation with... We discussed their focus with the program, how it fits in their development methodology, and their ultimate goal with threat modeling.The Application Security Podcast is brought to you by Security Journey.About Security JourneyJeevan Singh is a Security Engineer Manager at Segment, where he's embedding security into all aspects of the software development process.→ Learn more about Security JourneyConnect with Jeevan Singh:→ segmentio/threat-modeling-training→ Redefining Threat Modeling (Segment blog)Mentioned in this episode:→ segmentio/threat-modeling-training→ Redefining Threat Modeling (Segment blog)→ SegmentFollow the Application Security Podcast:➜ Home➜ X➜ LinkedIn➜ YouTube➜ Instagram➜ FacebookChapters:00:00 Meet Jeevan Singh: Threat modeling based in democracy01:16 Hey folks, welcome to another episode of the Application Security Podcast04:59 The question I always ask folks that come from a development07:24 Certainly, that's the model that I love as well, as far09:37 The engineering teams start performing a threat model, what are some12:51 You have any formal kind of way that you measure when14:13 You mentioned threat modeling tickets. Is that a metric that you're17:24 Then does your threat modeling, your self-serve threat modeling, does it20:07 This is really an industry best practice. Not enough people are25:22 Yeah, that's great. That is great. Okay, so tell me just31:13 For folks out there that are building their own program, I33:29 Awesome. Well, Jeevan, what would be a key takeaway or call