Moving from “shift left” to “born left” | Guest David Melamed

David Melamed of Jit brings us a new wrinkle in our ongoing series of developer security topics! Melamed says we should move beyond “shift left,” shifting the security earlier in the CI/CD pipeline, into “Born Left,” a platform in which security tools are in the hands of developers at the point of creation. Melamed talks about his early programming experiences, his Ph.D. in Bioinformatics, and the delineation of responsibilities between developers and the DevSec team. All that and a bit of CTO talk.0:00 - Moving from “shift left” to “born left”3:05 - How David Melamed got into cybersecurity6:00 - Choosing your cybersecurity job path11:15 - Daily work as a cybersecurity CTO13:02 - How to become a cybersecurity CTO15:10 - Keeping a company on track16:40 - DevSecOps shift left to born left21:08 - Born left, and overall security23:13 - Accountability for developers25:07 - Application security and born left29:33 - What will DevSecOps and born left look like in the future?31:00 - How to work in software development security34:35 - First steps to a cybersecurity development job35:30 - What is Jit?38:33 - Learn more about Melamed39:08 - Outro– Get your FREE cybersecurity training resources: https://www.infosecinstitute.com/free– View Cyber Work Podcast transcripts and additional episodes: https://www.infosecinstitute.com/podcastAbout InfosecInfosec’s mission is to put people at the center of cybersecurity. We help IT and security professionals advance their careers with skills development and certifications while empowering all employees with security awareness and phishing training to stay cyber-safe at work and home. More than 70% of the Fortune 500 have relied on Infosec Skills to develop their security talent, and more than 5 million learners worldwide are more cyber-resilient from Infosec IQ’s security awareness training. Learn more at infosecinstitute.com.