APPLICATION SECURITY ENGINEER ARCHETYPES

Summary from the TLDR InfoSec newsletter

The author of this post reflects on his time as an AppSec engineer in various organizations and divides AppSec roles into three buckets: AppSec Engineer in a Centralized Organization, Dedicated AppSec Engineer, and Security Partner Engineer. The author also classifies AppSec Engineers as either orchestrators, builders, specialists, or rapid responders. The post concludes with a mapping of the roles each archetype excels in and the prime traits essential for each archetype to succeed.