EP 36 — Highspot’s Joe Basirico on How to Build Security by Buildng Trust

Future of Application Security

In this episode of the Future of Application Security, Harshil speaks with Joe Basirico, Senior Director of Product Security at Highspot, a sales enablement platform. They discuss how product security's evolution has increased its focus on relationships and trust-building, why security is like fixing a leaky faucet, and how to prioritize for more efficiency and impact. They also discuss where product security is going and how AI will help it get there, the elements for security at scale, and how to better collaborate with developers.

Topics discussed:

• Why Joe "fell in love with security" and how his career evolved from developer to pen test to trainer, back to developer, and now to leader of a product security team.
• How product security has shifted to building trust and relationships among teams and customers — and why you should hire for hard and soft skills like empathy.
• Why security is like a leaky faucet, and why you should turn off the tap — or, fix the influx of vulnerabilities — before you spend time cleaning up the mess.
• How to prioritize what to focus on first, and why execution trumps prioritization when it comes to getting stuff done.
• What Joe does to make developers more successful through collaboration and solving problems together.
• The three elements Joe considers key for security at scale: awareness, enablement, and detection.
• The ways in which Joe and the security team distribute knowledge across the organization, including "hijacking October" for talks during Cybersecurity Awareness Month.
• What the future of product security will look like, and how AI tools will play a role in shaping it.