Panelists:Rafal Los, Mike McCormick, Christophe Veltsos, Jeff

Williams

1. How do I "get into" appsec? What background/degree/cert is best for someone entering the appsec field? Does it require a specific “mindset?” Entry level positions?

2. Are companies hiring specialized appsec professionals? How does hiring in appsec compare to other IT security disciplines? What parts of an organization is most likely to employ appsec specialists?

3. What steps can an appsec professional take to stay current technically, and advance professionally? I hear about the importance of "soft skills." What "soft skills" are important for an appsec professional? Other types of skills or education required?

4. Are there management positions in the appsec space? What skills/education should I work on to prepare to move into an appsec management position?

5. Which industries are good bets for long term appsec employment? Should I be worried about outsourcing, and if so, how can I avoid it?

6. How important is appsec considered in a typical IT security organization? Is this changing?

7. What role does appsec play in a typical software development shop?

8. Is database security a separate area of specialty? What are career prospects there?

Audience Questions

Contact info: Chris Veltsos (moderator): @DrInfoSec Raf Los: @Wh1t3Rabbit Jeff Williams: @PlanetLevel

Thank you