Moving from “shift left” to “born left” | Guest David Melamed

David Melamed of Jit brings us a new wrinkle in our ongoing series of developer security topics! Melamed says we should move beyond “shift left,” shifting the security earlier in the CI/CD pipeline, into “Born Left,” a platform in which security tools are in the hands of developers at the point of creation. Melamed talks about his early programming experiences, his Ph.D. in Bioinformatics, and the delineation of responsibilities between developers and the DevSec team. All that and a bit of CTO talk. 0:00 - Moving from “shift left” to “born left” 3:05 - How David Melamed got into cybersecurity 6:00 - Choosing your cybersecurity job path 11:15 - Daily work as a cybersecurity CTO 13:02 - How to become a cybersecurity CTO 15:10 - Keeping a company on track 16:40 - DevSecOps shift left to born left 21:08 - Born left, and overall security 23:13 - Accountability for developers 25:07 - Application security and born left 29:33 - What will DevSecOps and born left look like in the future? 31:00 - How to work in software development security 34:35 - First steps to a cybersecurity development job 35:30 - What is Jit? 38:33 - Learn more about Melamed 39:08 - Outro – Get your FREE cybersecurity training resources: https://www.infosecinstitute.com/free – View Cyber Work Podcast transcripts and additional episodes: https://www.infosecinstitute.com/podcast About Infosec Infosec’s mission is to put people at the center of cybersecurity. We help IT and security professionals advance their careers with skills development and certifications while empowering all employees with security awareness and phishing training to stay cyber-safe at work and home. More than 70% of the Fortune 500 have relied on Infosec Skills to develop their security talent, and more than 5 million learners worldwide are more cyber-resilient from Infosec IQ’s security awareness training. Learn more at infosecinstitute.com.