#08 - 12 - The surprising game that transformed AppSec training

Transform your approach to cybersecurity training with this insightful episode featuring Max Alejandro Gomez Sanchez Vergaray, a pioneer in integrating gaming into application security. Discover how Max’s innovative methodology not only translates complex security principles into engaging formats but also empowers teams to prioritize cybersecurity without the usual resistance. If you’re in tech, especially in software development or security, this episode is a must-listen!
Max shares his journey from leading a top banking application security program to launching his own consulting firm focused on secure software development. He reveals the secret behind the success of the OWASP Cornucopia game—a tool that makes learning about security engaging and impactful. You’ll learn how to leverage gamification to enhance security awareness and foster a culture that values cybersecurity as an integral part of development.
You’ll discover:
- How to implement OWASP Cornucopia in your organization and the surprising benefits it offers.
- The importance of integrating security into your product backlog to ensure it’s not an afterthought.
- Practical tips for overcoming common challenges in security training, especially in environments resistant to change.
- The role of fun in training and how it can lead to better retention and engagement among team members.
Why does this matter? In today’s digital landscape, the consequences of neglecting security can be catastrophic. By adopting innovative strategies like gamification, you not only mitigate risks but also build a more informed and proactive team. This episode opens the door to new possibilities in your approach to cybersecurity, emphasizing that learning can—and should—be enjoyable.
Tune in for this essential discussion that promises to reshape your understanding of security training. Perfect for tech leaders, developers, and anyone involved in cybersecurity!

Become a supporter of this podcast: https://www.spreaker.com/podcast/devsecops-podcast--4179006/support.

Support: Nova8, Checkmarx, Snyk, Conviso, Gold Security, CyberSec Games and PurpleBird Security.