Ochaun Marshall is an Application Security Consultant. In his roles of secure ideas, he works on on-going development projects utilizing Amazon web services and breaks other people&apos;s web applications. Ochaun joins us to talk about SAST and IaC, static application security testing and infrastructure as code. We talk about what they are, how they work, the security benefits, some of the tools that make them possible, and we finish our conversation talking about developer empathy and why Ochaun has developer empathy as a result of some of the experiences that he has as a developer and as a security person. We hope that you enjoy this episode with...Ochaun Marshall.FOLLOW OUR SOCIAL MEDIA: ➜Twitter: <a href='https://twitter.com/AppSecPodcast'>@AppSecPodcast</a> ➜LinkedIn:<a href='https://www.linkedin.com/showcase/83990241'> The Application Security Podcast</a> ➜YouTube: <a href='https://www.youtube.com/channel/UCfrTGqjSsFCQW4k6TueuY-A'>https://www.youtube.com/@ApplicationSecurityPodcast</a> Thanks for Listening! ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Loren Kohnfelder -- Designing Secure Software

Chris Romeo and Robert Hurlbut dig into the tips, tricks, projects, and tactics that make various application security professionals successful. They cover all facets of application security, from threat modeling and OWASP to DevOps+security and security champions. They approach these stories in an educational light, explaining the details in a way those new to the discipline can understand. Chris Romeo is the CEO of Devici and a General Partner at Kerr Ventures, and Robert Hurlbut is a Principal Application Security Architect focused on Threat Modeling at Aquia.