Securing the Gaps: M Brennan on Integration, Context and Developer Experience

Episode SummaryWith a career that spans mainframes, integration platforms, and developer experience, M Brennan brings a unique lens to the world of application security. In this episode, M joins Cole Cornford to unpack why integration is often the riskiest layer in software systems, how context is everything when choosing security controls, and what it really takes to build security into developer workflows without adding friction.They dive into stories from government and enterprise environments, the overlap between security and resilience, and how thinking in terms of energy and empathy, not just tools, can lead to better outcomes for everyone. Plus, a surprisingly effective stereo-selling strategy, some well-earned AI scepticism, and a jam-jar analogy you’ll never forget.Timestamps03:45 From COBOL to Developer Experience in Security06:37 Choosing the Right Security Control for the Right Risk10:00 Reducing Developer Friction with Secure Defaults14:10 How Threat Modelling Creates Real Value17:57 Fixing Access and Provisioning for Devs and Security20:09 Virtual Dev Environments and Automating the Boring Stuff24:04 Smarter Security Adoption and the Jam Jar Effect28:48 AI, Developer Toil and the Problem with Overpromising31:03 Using AI to Kickstart Threat Modelling and Resilience33:56 Why Some Tech Trends Aren’t Worth the Hype36:09 The Risk of Letting Chatbots Handle Security Promises37:16 Final Takeaways on Empathy, Context and CollaborationMentioned in this episode:Call for FeedbackThis podcast uses the following third-party services for analysis: Podtrac - https://analytics.podtrac.com/privacy-policy-gdrpSpotify Ad Analytics - https://www.spotify.com/us/legal/ad-analytics-privacy-policy/