Mukund Sarma -- Developer Tools that Solve Security Problems

Mukund Sarma, the Senior Director for Product Security at Chime, talks with Chris about his career path from being a software engineer to becoming a leader in application security. He explains how he focuses on building security tools that are easy for developers to use and stresses the importance of looking at application security as a part of the broader category of product security. Mukund highlights the role of collaboration over security mandates and the introduction of security scorecards for proactive risk management. He and Chris also discuss the strategic implementation of embedded security functions within development teams. Discover the potential of treating security as an enabling function for developers, fostering a culture of shared responsibility, and the innovative approaches Chime employs to secure its services with minimal friction for developers.Connect with Mukund Sarma:→ Monocle Part 1→ Building Secure and Reliable SystemsMentioned in this episode:→ Monocle Part 1→ Building Secure and Reliable Systems→ Chime→ Mitigating Risky Pull Requests With Monocle Risk Advisor Part 2 7013e1485bf2→ YouTube video→ Drive→ BanditFollow the Application Security Podcast:➜ Home➜ X➜ LinkedIn➜ YouTube➜ Instagram➜ FacebookChapters:00:00 Meet Mukund Sarma: Developer Tools that Solve Security Problems03:37 Yeah. Yeah. So did you, uh, start Chimes product security team04:34 You use the words AppSec and ProdSec08:21 I guess I want to ask kind of the, the other10:17 That's the Overwatch. Was that the overwatch13:26 I got to imagine they're loving it because you're making their15:55 If I accidentally create a service that doesn't have a JSON19:16 Yeah, John Doerr in the famous OKR book, Measure What Matters23:03 Yeah, I mean, I think that's the ultimate gamification play, is25:48 A big task, right27:36 It has to be a motivational lever in the equation, right32:43 Did you choose the order35:18 Mm hmm. So if a, let's say somebody listening here is37:41 Yeah, some, some more skill sets on the cross collaboration front42:13 All right, let's do some lightning round questions. I could, we45:12 Do you want to leave our audience with