How to Hire the Right AppSec Engineer

Follow @techleadjournal:

[familiarshadow]

I think it’s important for appsec people to understand both application development/computer architecture and operations. Sometimes I find that software engineers are missing the latter and ops/support types are missing the former, but either group can be strong hires if they have both. It’s really a strong desire to find out how things work to a deep enough level that you can prevent misuse.