Software Engineering Daily

Security Engineering with Ben Huber

Apr 18, 2024

53:13

Snipd AI

Ben Huber, a security engineer, discusses penetration testing, attack vectors, security tools, and integration of security in development. Gregor Vand, a security-focused technologist, explores secure authentication, user engagement strategies, and understanding attack surfaces in cybersecurity.

AI Summary

AI Chapters

Episode notes

Podcast summary created with Snipd AI

Quick takeaways

Integrated security early in development lifecycle is crucial for proactive vulnerability detection and prevention.

Understanding and managing attack surfaces are vital for mitigating threats and reducing false positives in security findings.

Deep dives

Transition into Security Engineering

Starting as a security engineer almost 10 years ago, Ben Huber's journey began with a shift from a generic business degree to information systems. Moving from consulting to internal roles at companies like Crypto.com and Blackpanda, he emphasized the importance of switching to in-house teams to deepen his understanding of system security and gain access to vital components like code base and configurations.

Introduction

3min

Evolution of Pen Testing Roles and Integration of Security Tools in CI/CD Workflows

10min

Exploring the Extensive Toolset of Security Engineering

2min

Navigating Cybersecurity Challenges in a Crypto Exchange Environment

5min

Exploring Secure and User-Friendly Authentication Methods

3min

Enhancing User Security Through Transparency and Gamification Strategies

3min

Enhancing User Engagement in Security Measures

2min

Understanding Attack Surfaces and Subdomains in Cybersecurity

17min

Entering the Security Field and Developing a Security Mindset

9min

Ben Huber is a security engineer who has worked at companies including Crypto.com and Blackpanda. He joins the podcast to talk about his career, penetration or “pen” testing, attack vectors, security tools, and much more.

Gregor Vand is a security-focused technologist, and is the founder and CTO of Mailpass. Previously, Gregor was a CTO across cybersecurity, cyber insurance and general software engineering companies. He has been based in Asia Pacific for almost a decade and can be found via his profile at vand.hk.