Justin Collins -- Enabling the Business to Move Faster, Securely

Justin Collins of Gusto joins Robert and Chris for a practical conversation about running security teams in an engineering-minded organization. Justin shares his experience leading product security teams, the importance of aligning security with business goals, and the challenges arising from the intersection of product security and emerging technologies like GenAI. Justin Collins currently heads up security at Gusto. In the past, he's been an AppSec engineer at SurveyMonkey, Twitter, and AT&T Interactive. He's also the primary author of Brakeman, a free static analysis security tool for Ruby on Rails. We explore security partners, GRC and privacy intersections, and the challenges that GenAI will bring to product security over the next five years.Connect with Justin Collins:→ The DevOps Handbook→ GustoMentioned in this episode:→ The DevOps Handbook→ Gusto→ Brakeman→ Ruby on Rails→ Ruby→ Content-Security-Policy (MDN)→ The DevOps HandbookFollow the Application Security Podcast:➜ Home➜ X➜ LinkedIn➜ YouTube➜ Instagram➜ FacebookChapters:00:00 Meet Justin Collins: Enabling the Business to Move Faster, Securely04:23 Rest, as they say, is history, right08:47 Hmm. Cool, thanks. Um, Robert, why don't you take us into12:51 What's been the response from the business to this statement where15:50 You think it's, do you think ProdSec is easier in a20:51 Yeah. I think that's, that's, that's, that's advice worth gold right23:58 You mentioned a couple things, uh, that sound like good keys26:50 Hm, So in the last, uh, I guess, number of years31:21 Yeah. that's true. I want to give a special shout out35:43 It SQL injection. It's vulnerable or it's not. It's, we don't38:31 All right. So the lightning round is three questions that we40:33 I mean, we have to end the interview now, but other42:43 Very cool. All right. And the final one is, uh, what's44:51 Yeah, that's true. All right. Well, Justin, how about a key