Robyn Lundin -- Planning & organizing a penetration test as an AppSec team

Robyn Lundin started working in tech after a coding boot camp as a developer for a small startup. She then discovered her passion for security, pivoted into pentesting for NCC Group, and now works as a Senior Product Security Engineer for Slack. Robyn joins us to discuss the role of penetration testing within the application security realm. Robyn provides actionable guidance that you can apply directly to your application pen testing program. We hope you enjoy this conversation with Robyn London. The conversation connects NCC Group, Slack, OWASP Juice Shop to practical choices that application security teams can make in their own programs.The Application Security Podcast is brought to you by Security Journey.About Security JourneyWe help enterprises reduce vulnerabilities through application security education for developers and everyone in the SDLC.→ Learn more about Security JourneyConnect with Robyn Lundin:→ NCC Group→ SlackMentioned in this episode:→ NCC Group→ Slack→ OWASP Juice ShopFollow the Application Security Podcast:➜ Home➜ X➜ LinkedIn➜ YouTube➜ Instagram➜ FacebookChapters:00:00 Meet Robyn Lundin: Planning & organizing a penetration test as an AppSec team03:37 Very, very cool. And that's, you know, one of the things05:59 Very cool. And mentorship is such an important thing for us07:17 Great advice. So Robyn, as we get started today in talking08:55 To kind of dive into the deep end of our penetration13:27 Yeah. So you mentioned low-hanging fruit, and I guess that's always17:37 I've been away from pen testing for a long, long, long20:16 Frequency. So let's say we have 1,000 apps. Do we test22:07 Yeah, and just to let the record show, I think we24:57 Would that also apply to, so if we had internal resources26:48 Very good. So if you would, Robyn, just sort of wrapping