Jet Anderson -- The AppSec Code Doctor

Jet Anderson's passion is teaching today's software developers to write secure code as part of modern DevOps pipelines, at speed and scale, without missing a beat. He's been a software engineer for over 25 years and believes fixing security bugs is better than finding them. Jet joins us to discuss software or security engineer first, how fixing security bugs is better than just finding them, and the Code Doctor security training program he built and deployed. We hope you enjoy this conversation with... Jett Anderson's passion is teaching today's software developers to write secure code as part of modern DevOps pipelines at speed and at scale without missing a beat.The Application Security Podcast is brought to you by Security Journey.About Security JourneyJett Anderson's passion is teaching today's software developers to write secure code as part of modern DevOps pipelines at speed and at scale without missing a beat.→ Learn more about Security JourneyConnect with Jet Anderson:→ OWASP Top 10→ CSSLPMentioned in this episode:→ OWASP Top 10→ CSSLP→ CISSP→ OWASP Dependency-Check→ Content Security Policy Cheat Sheet→ OAuth 2.0→ OpenID Connect→ Jim Manico→ Gary McGraw→ Content-Security-Policy (MDN)Follow the Application Security Podcast:➜ Home➜ X➜ LinkedIn➜ YouTube➜ Instagram➜ FacebookChapters:00:00 Meet Jet Anderson: The AppSec Code Doctor01:49 Yeah, but we're going to take a left turn or a04:52 Do you define a vulnerability as then07:54 Yeah, that's true. So, I want to hit play on that14:31 There, you know, kind of a lesson within the way that17:39 You should understand is the OWASP Top 10. But I'm curious21:08 Yeah, I mean, it's empathy, right25:28 Kind of what is it and what were the pieces that35:02 Yeah, that's great. It's— I always love, like I said, I