Joshua Wells -- Application Security in the Age of Zero Trust

What is zero trust, and how does it impact the world of applications and application security? We dive deep into zero trust with Joshua Wells, a seasoned cybersecurity expert with over ten years of experience. Joshua explores the intricacies of zero trust, a cybersecurity model that dictates no user or machine is trusted by default and must be authenticated every time. Joshua Wells is a seasoned cybersecurity expert with over 10 years of experience leading teams and organizations through intricate cybersecurity situations. His extensive background includes working with various government bodies and private sector organizations, specializing in areas such as architectural security, endpoint detection, mobile device management, and risk assessment.The Application Security Podcast is brought to you by Security Journey.About Security JourneyJoshua Wells is a seasoned cybersecurity expert with over 10 years of experience leading teams and organizations through intricate cybersecurity situations.→ Learn more about Security JourneyConnect with Joshua Wells:→ BeyondCorp→ CISA Zero Trust Maturity ModelMentioned in this episode:→ BeyondCorp→ CISA Zero Trust Maturity Model→ NIST SP 800-53→ Zscaler→ LogRhythm→ Sumo Logic→ DISA STIG→ OWASP Top 10→ OWASP API Security Top 10→ Cyber Vault SolutionsFollow the Application Security Podcast:➜ Home➜ X➜ LinkedIn➜ YouTube➜ Instagram➜ FacebookChapters:00:00 Meet Joshua Wells: Application Security in the Age of Zero Trust02:59 How'd you get into security06:18 As we were talking before the interview, I have to add07:16 Like Superman, what was his name10:51 With zero trust then, I primarily think of network architecture is14:53 Everything is internet accessible. Everything is public IP addressable. All the18:08 Back to the regularly scheduled programming here. When you think about20:38 Thinking through that a little bit, for an organization when they've23:10 All right, so we talked about the positive side. I mean25:58 Yeah, and I've seen similar, and you probably have too, in28:37 We think about areas of focus that an AppSec person should32:14 As I'm listening to you talk about applications in a zero35:24 In the deep end of the zero trust pool, what would37:15 As far as a call to action, so let's just assume