The art and science of product security: A deep dive with Jacob Salassi

Interview with Jacob Salassi (Snowflake) discussing a data-driven, scientific approach to product security, including restructuring security functions for greater influence, integrating threat detection and incident response into development, leveraging tools like Materialized Threats for graph-based threat modeling, and emphasizing quantitative risk analysis. The conversation highlights the challenges of people vs. technical problems, embedding security within engineering teams, and the potential of AI/ML, offering practical guidance for aspiring AppSec professionals.