Building an Engineering Security Culture - Failure stories included - Edwin Kwan, Tyro Payments

<p>In this episode of the Virtual Coffee with Ashish edition, we spoke with <em><strong>Edwin Kwan, </strong></em>Head of Application and Software Security at Tyro payments.</p> <ul> <li>Host: <a href="https://twitter.com/hashishrajan">Ashish Rajan - Twitter @hashishrajan</a></li> <li>Guest: <a href="https://twitter.com/edkwan">Edwin Kwan - Twitter @edkwan</a><a href="https://twitter.com/AlannahGuo"><br> </a></li> </ul> <p>Edwin &amp; Ashish spoke about</p> <ul> <li>What was Edwin’s path into CyberSecurity?</li> <li>What is AppSec for people who don't know?</li> <li>What is the difference between Application Security and Software Security?</li> <li>Is being a developer an advantage going into Application Security?</li> <li>Is AppSec any different between cloud compared so an application deployed on-premise?</li> <li>Enabling an engineering security culture - What does this mean for those who don't know?</li> <li>Engineering Security Culture - How has it evolved to now most of the code developed is using open source libraries</li> <li>Enabling an engineering security culture - Where can one start and what should be avoided?</li> <li>What is DevSecOps for you?</li> <li>Edwin’s book - Failure of DevSecOps<br> </li> </ul> <p><strong>ShowNotes and Episode Transcript </strong>on <a href="https://anchor.fm/dashboard/episode/eavn9r/metadata/www.cloudsecuritypodcast.tv">www.cloudsecuritypodcast.tv</a></p> <p><strong>Twitter</strong> - <a href="https://anchor.fm/dashboard/episode/eavn9r/metadata/www.twitter.com/kaizenteq">@kaizenteq</a> <a href="https://anchor.fm/dashboard/episode/eavn9r/metadata/www.twitter.com/hashishrajan">@hashishrajan</a></p> <p><strong>If you want to watch the previous episodes:</strong></p> <p>- Twitch Channel: <a href="https://lnkd.in/gxhFrqw">https://lnkd.in/gxhFrqw</a></p> <p>- Youtube Channel: <a href="https://lnkd.in/gUHqSai">https://lnkd.in/gUHqSai</a></p>