S2E2 - Dustin Lehr

S2E2 - Dustin Lehr

Update: 2025-01-13
Share

Description

In Season 2 Episode 2, we interview Dustin Lehr, Co-Founder, Chief Product & Technology Officer at Katilyst.

We discuss the significance of security champions in application security. We explore the cultural aspects of implementing security champions programs, the challenges of maintaining engagement, and the importance of leadership support. The conversation delves into measuring the success of these programs, the role of behavioral science, and the impact of effective training and gamification in enhancing security awareness within organizations. Dustin discusses the Octalysis framework, which identifies eight core human motivators that can be leveraged in gamification and cybersecurity culture. He emphasizes the importance of building relationships within organizations to change perceptions of security teams and foster a collaborative environment. Dustin also shares insights on the intersection of creativity and cybersecurity, his motivations for starting a company, and the role of AI in enhancing human interactions rather than replacing them.




Key Takeaways


- Security champions programs are crucial for fostering a security culture.


- Engagement and leadership support are key to program success.


- Measuring success can be challenging but is essential.


- Behavioral science plays a significant role in security engagement.


- Gamification can enhance training but must be used wisely.


- Curiosity can drive initial engagement but must be sustained.


- Training should be relevant and tailored to the audience.


- Creating empathy between teams improves security outcomes.


- Deep gamification focuses on understanding human drives.


- Starting a company is about helping others, not just profit.


- AI can augment human interactions but cannot replace them.


- Security teams should focus on providing value and support.


- Human connection is essential in cybersecurity.


- The importance of community and collaboration in security efforts.

Tune in to find out more!

Contacting Dustin
* LinkedIn: https://www.linkedin.com/in/dustinlehr/


* Security Champion Success Guide: https://securitychampionsuccessguide.org/

Contacting Anshuman
* LinkedIn: ⁠⁠⁠⁠https://www.linkedin.com/in/anshumanbhartiya/
* X: ⁠⁠⁠⁠https://x.com/anshuman_bh
* Website: ⁠⁠⁠⁠https://anshumanbhartiya.com/
* ⁠⁠⁠⁠Instagram: ⁠⁠⁠https://www.instagram.com/anshuman.bhartiya

Contacting Sandesh
* LinkedIn: ⁠⁠⁠⁠https://www.linkedin.com/in/anandsandesh/
* X: ⁠⁠⁠⁠https://x.com/JubbaOnJeans
* Website: ⁠⁠⁠⁠https://boringappsec.substack.com/

Comments 
In Channel
S2E9 - Ali Mesdaq

S2E9 - Ali Mesdaq

2025-03-0344:27

S2E8 - Ankita Gupta

S2E8 - Ankita Gupta

2025-02-2443:10

S2E7 - Jonathan Cran

S2E7 - Jonathan Cran

2025-02-1745:40

S2E5 - Drew Dennison

S2E5 - Drew Dennison

2025-02-0142:15

S2E4 - Varun Badhwar

S2E4 - Varun Badhwar

2025-01-2747:05

S2E3 - Robert Wood

S2E3 - Robert Wood

2025-01-2044:05

S2E2 - Dustin Lehr

S2E2 - Dustin Lehr

2025-01-1348:52

S2E1 - Jimmy Mesta

S2E1 - Jimmy Mesta

2025-01-0654:00

S1E09 - Incidents

S1E09 - Incidents

2024-05-1337:48

S1E05 - Threat Modeling

S1E05 - Threat Modeling

2024-04-0101:01:47

S1E03 - Bug Bounties

S1E03 - Bug Bounties

2024-03-1801:11:17

S1E02 - First Security Hire

S1E02 - First Security Hire

2024-03-1101:07:31

loading
00:00
00:00
x

0.5x

0.8x

1.0x

1.25x

1.5x

2.0x

3.0x

Sleep Timer

Off

End of Episode

5 Minutes

10 Minutes

15 Minutes

30 Minutes

45 Minutes

60 Minutes

120 Minutes

S2E2 - Dustin Lehr

S2E2 - Dustin Lehr

The Boring AppSec Podcast