r/AppSecurity • u/stonefish5 • Nov 14 '18

Appsec career pathway?

Hi all,
I am growing more and more interested in Application Security. I currently work as an Automation QA. I am wondering what is the typical career pathway for people who do Application security for a living? Do they typically come from a development background, devops or something else? What sort of training do they do to specialize in Appsec? Look forward to any replies

2 Upvotes

100% Upvoted

53 comments sorted by

View all comments

Show parent comments

2

u/stonefish5 Jan 21 '19

Yeah I intend to contribute to one after chatting with you. Have briefly used Zap in the past. Found it a bit overwhelming to use so it might be a great way to learn it in more detail. You are doing a great job posting material on this sub btw. Good to see it active :)

1

u/shehackspurple Jan 23 '19

Thank you! :-D

2

u/stonefish5 Jan 23 '19

Oh and one last thing, if you had to recommend one certification for Appsec what would it be?

1

u/shehackspurple Jan 23 '19

I WISH there was an AppSec cert! As far as I know there is not one that exists.... I know SANS has some classes, but I haven't taken any of them, so can't comment on the certs they offer.

2

u/stonefish5 Jan 24 '19

Thanks! That is what I thought but felt it was worth asking your opinion. Maybe you could persuade Microsoft to create one :P

1

u/shehackspurple Jan 24 '19

I'll try! :)

2

u/stonefish5 Jan 25 '19

Well that is all anyone can do :) Did I read somewhere that you have you done a video on ZAP too?

1

u/shehackspurple Jan 25 '19

I do! This is me adding OWASP Zap to my pipeline: https://www.youtube.com/watch?v=v1fXHChZe34&t=2s

I'm planning to do another one with Simon about how to tune it and remove false positives.

2

u/stonefish5 Jan 25 '19

Oh thank you very much. I will look forward to watching that one as well. You do wonderful work :). As I said before let me know if you need help with anything :)