Modernizing Security With Tim Crothers
In episode 105 of The Secure Developer, Guy Podjarny chats to Tim Crothers, Senior Vice President and Chief Security Officer at Mandiant about how to modernize security in DevSecOp. As someone who has been in the world of IT since the 80s, Tim explains how he has seen DevSecOps evolve over time, how security has changed its approach over the years, and what DevSecOps means to him. They discuss the differences between controls and guardrails, how often developers are allowed to override guardrails, and to what degree these are left to the decisions of development teams.
Episode 105 of the The Secure Developer podcast, hosted by Tim Crothers, Guy Podjarny, titled "Modernizing Security With Tim Crothers" was published on December 13, 2021 and runs 46 minutes.
December 13, 2021 ·46m · The Secure Developer
Summary
In episode 105 of The Secure Developer, Guy Podjarny chats to Tim Crothers, Senior Vice President and Chief Security Officer at Mandiant about how to modernize security in DevSecOp. As someone who has been in the world of IT since the 80s, Tim explains how he has seen DevSecOps evolve over time, how security has changed its approach over the years, and what DevSecOps means to him. They discuss the differences between controls and guardrails, how often developers are allowed to override guardrails, and to what degree these are left to the decisions of development teams.
Episode Description
Today on The Secure Developer, we look at how to modernize security in DevSecOps. To guide us through this, we are joined by Tim Crothers, Senior Vice President and Chief Security Officer at Mandiant. Tim is a seasoned security leader with over 20 years of experience building and running information security programs, large and complex incident response engagements, and threat and vulnerability assessments. He has a wealth of experience in cyber threat intelligence, reverse engineering, and computer forensics. He has authored 17 books to date and presents regular training and speaking engagements at information security conferences. As someone who has been in the world of IT since the 80s, Tim explains how he has seen DevSecOps evolve over time, how security has changed its approach over the years, and what DevSecOps means to him. We discuss the differences between controls and guardrails, how often developers are allowed to override guardrails, and to what degree these are left to the decisions of development teams. To find out what Tim considers to be the optimal setup for the split of responsibility between development teams and security teams, what he looks for when hiring new people into his product security team, and what his top three KPIs are, tune in today!
Follow Us
Similar Episodes
Apr 11, 2026 ·13m
Apr 11, 2026 ·26m
Apr 11, 2026 ·23m
Apr 11, 2026 ·14m
Apr 11, 2026 ·25m
Apr 11, 2026 ·13m