The Security Champions Podcast

Mike Burch

Automation, Generative AI, Shift Left - the world of application security is evolving fast, and so are the conversations that shape it. Welcome to The Security Champions Podcast, the go-to resource for insights from the front lines of application security. The podcast is cohosted by Michael Burch, Director of Application Security for Security Journey, and Dustin Lehr, the Director of AppSec Advocacy. Each month, one of them shares a candid conversation with security leaders, engineering voices, and software experts.  From championing secure development practices to navigating real-world challenges in modern SDLCs, this show explores how teams are scaling appsec, strategy and culture.  New Episodes drop monthly, with even more security content at https://www.securityjourney.com/ Always remember: Security is a Journey, not a Destination. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ This podcast is sponsored by Security Journey. FOLLOW US to stay up-to-date with new content!X (https://x.com/SecurityJourney)LinkedIn (https://www.linkedin.com/company/7574213)Instagram (https://www.instagram.com/securityjourney/?hl=en)YouTube (https://www.youtube.com/@UCBVPnBCNcZqx_WAuCsV6BuA )Online (securityjourney.com)CONTACT: hello@securityjourney.com

  1. Aug 5

    Michael Erquitt - The Future of Security Champions in an AI World

    In this special episode of The Security Champions Podcast, Michael Burch passes the hosting reins to Security Journey senior security engineer Michael Erquitt. Together, they reflect on the podcast’s evolution and explore how the role of the security champion is changing in an AI-driven world. As developers increasingly work alongside AI agents, and more employees gain the ability to build software, security champions must expand beyond traditional secure coding education to influence workflows, architecture, governance, risk, and the human-AI relationship. They also examine how champions can help teams integrate security directly into AI-enabled workflows rather than treating it as an afterthought. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Podcast sponsored by Security Journey, Secure Coding Training for Developers and Everyone in the SDLC. Learn more at securityjourney.com.  FOLLOW US to stay up-to-date with new content! LinkedIn (linkedin.com/company/security-journey)  Instagram (https://www.instagram.com/securityjourney)YouTube (youtube.com/c/securityjourney)Twitter (twitter.com/SecurityJourney)Online (securityjourney.com)  CONTACT: hello@securityjourney.com Get your free VIBE Coding Field Guide: https://hubs.ly/Q043-zdS0

  2. Jul 8

    North Carolina State University Students - Navigating the Cybersecurity Journey

    In this episode of The Security Champions Podcast, Michael Burch sits down with Britton Janet, Quinn Merkel, and Snehanshu Samanta, students from North Carolina State University, to discuss their collaboration with Security Journey on a project to automate lab setups. The conversation explores what they learned while working through a real-world technical project and how the experience shaped their understanding of development, security, and teamwork. They share the challenges they faced along the way, from troubleshooting and adapting to unfamiliar requirements to learning when to ask questions and how to keep moving when things did not go as planned. The episode also touches on the role of AI in the development process and the importance of persistence, curiosity, and communication when building practical cybersecurity solutions. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Podcast sponsored by Security Journey, Secure Coding Training for Developers and Everyone in the SDLC. Learn more at securityjourney.com.  FOLLOW US to stay up-to-date with new content! LinkedIn (linkedin.com/company/security-journey)  Instagram (https://www.instagram.com/securityjourney)YouTube (youtube.com/c/securityjourney)Twitter (twitter.com/SecurityJourney)Online (securityjourney.com)  CONTACT: hello@securityjourney.com Get your free VIBE Coding Field Guide: https://hubs.ly/Q043-zdS0

  3. Jun 3

    Brandon Troche - Engaging the Next Generation of Security Champions

    Brandon Troche is an OWASP chapter leader in Las Vegas with a unique path into the AppSec community. Before stepping into cybersecurity, Brandon built his career in sales and marketing within the health and fitness industry, bringing a people-first perspective to community building, relationship development, and security education. In this episode of The Security Champions Podcast, Brandon joins Michael Burch to discuss the role of OWASP chapters in creating stronger, more connected AppSec communities. They explore the importance of member feedback, in-person meetups, accessible events, and support networks that help security professionals learn, collaborate, and grow, regardless of their technical background. 0:07 Welcome to The Security Champions Podcast ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Podcast sponsored by Security Journey, Secure Coding Training for Developers and Everyone in the SDLC. Learn more at securityjourney.com.  FOLLOW US to stay up-to-date with new content! LinkedIn (linkedin.com/company/security-journey)  Instagram (https://www.instagram.com/securityjourney)YouTube (youtube.com/c/securityjourney)Twitter (twitter.com/SecurityJourney)Online (securityjourney.com)  CONTACT: hello@securityjourney.com Get your free VIBE Coding Field Guide: https://hubs.ly/Q043-zdS0

  4. May 6

    Spandana Sarala Gorantla - Scaling Security: How AI and Collaboration Transform Threat Modeling

    Spandana Sarala Gorantla is a Senior Product Security Engineer at Adobe, specializing in product security, threat modeling, and secure development practices. She is passionate about making threat modeling collaborative, practical, and scalable, especially as AI and agentic systems reshape how teams build software. Spandana joined The Security Champions Podcast to discuss why threat modeling matters more than ever in the age of AI. In this episode, she shares how threat modeling became a central part of her security career, why collaboration across engineering, product, business, and security teams is essential, and how AI can help scale early risk identification without replacing human judgment. The conversation explores practical approaches to threat modeling, the role of Security Champions, and why frameworks like STRIDE and MAESTRO can help teams ask better questions about modern systems. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Podcast sponsored by Security Journey, Secure Coding Training for Developers and Everyone in the SDLC. Learn more at securityjourney.com.  FOLLOW US to stay up-to-date with new content! LinkedIn (linkedin.com/company/security-journey)  Instagram (https://www.instagram.com/securityjourney)YouTube (youtube.com/c/securityjourney)Twitter (twitter.com/SecurityJourney)Online (securityjourney.com)  CONTACT: hello@securityjourney.com Get your free VIBE Coding Field Guide: https://hubs.ly/Q043-zdS0

  5. Apr 8

    Nariman Aga-Tagiyev - Understanding the EU Cyber Resiliency Act: What You Need to Know

    Nariman Aga-Tagiyev is an application security expert with over two decades of experience in software development across diverse technology stacks, including cloud-native environments. Since 2016, he has been in charge of the Application Security program and the Secure Software Development Lifecycle, with deep expertise in frameworks such as BSIMM, OWASP SAMM, and NIST SSDF.  In this episode, Nariman breaks down the EU Cyber Resilience Act (CRA) and why it’s far more than a regional regulation. It’s a global shift in how software security is expected to be built and maintained. He explains what the CRA requires, how it impacts software vendors and open source, and what “secure by design” really looks like in practice. The conversation also covers practical steps teams can take today to prepare, without overcomplicating their approach. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Podcast sponsored by Security Journey, Secure Coding Training for Developers and Everyone in the SDLC. Learn more at securityjourney.com.  FOLLOW US to stay up-to-date with new content! LinkedIn (linkedin.com/company/security-journey)  Instagram (https://www.instagram.com/securityjourney)YouTube (youtube.com/c/securityjourney)Twitter (twitter.com/SecurityJourney)Online (securityjourney.com)  CONTACT: hello@securityjourney.com Get your free VIBE Coding Field Guide: https://hubs.ly/Q043-zdS0

  6. Mar 18

    Roger Grimes - AI and the Future of Cybersecurity

    Roger A. Grimes, CISO Advisor for KnowBe4, Inc., is the author of 16 books and more than 1,600 articles, with deep expertise in host security and defending against hacker and malware attacks. A frequent speaker at major cybersecurity conferences, Roger is known for his fast-paced, insight-driven presentations packed with practical recommendations. In this episode of The Security Champions Podcast, Roger joins the conversation to explore the impact of AI on cybersecurity, software development, and industry practices. He shares insights on the opportunities and challenges of AI integration, highlights emerging trends, and emphasizes the importance of responsible AI use alongside strong foundational security principles. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Podcast sponsored by Security Journey, Secure Coding Training for Developers and Everyone in the SDLC. Learn more at securityjourney.com.  FOLLOW US to stay up-to-date with new content! LinkedIn (linkedin.com/company/security-journey)  Instagram (https://www.instagram.com/securityjourney)YouTube (youtube.com/c/securityjourney)Twitter (twitter.com/SecurityJourney)Online (securityjourney.com)  CONTACT: hello@securityjourney.com Get your free VIBE Coding Field Guide: https://hubs.ly/Q043-zdS0

  7. Feb 4

    John Benninghoff - Tapping Other Fields To Approach Security Differently

    John Benninghoff is a long-time student and practitioner of managing information risk. His 25-year career in Cybersecurity and SRE spans financial services, retail, government, and health care. He founded Security Differently to advise organizations on how to integrate security into how work is done, quantify risk, improve performance, and make better decisions. John joins the podcast to explore what it means to treat security like other mature safety disciplines. Drawing on safety science, economics, and hands-on AppSec experience, he shares a practical perspective on security as decision support and how empowering developers with the right time and tools leads to stronger security outcomes. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Podcast sponsored by Security Journey, Secure Coding Training for Developers and Everyone in the SDLC. Learn more at securityjourney.com.  FOLLOW US to stay up-to-date with new content! LinkedIn (linkedin.com/company/security-journey)  Instagram (https://www.instagram.com/securityjourney)YouTube (youtube.com/c/securityjourney)Twitter (twitter.com/SecurityJourney)Online (securityjourney.com)  CONTACT: hello@securityjourney.com Get your free VIBE Coding Field Guide: https://hubs.ly/Q043-zdS0

  8. 12/10/2025

    Dustin Lehr & Michael Burch - End of Year Recap 2025

    It’s been a momentous year for security champions, developer empowerment, and cultivating security culture. In this special year-in-review episode, hosts Dustin Lehr and Michael Burch look back on the standout conversations and greatest moments from The Security Champions Podcast throughout 2025. Whether you're building a champion program, supporting developers, or shaping appsec strategy, this episode brings together the best of 2025 in one conversation. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Podcast sponsored by Security Journey, Secure Coding Training for Developers and Everyone in the SDLC. Learn more at securityjourney.com.  FOLLOW US to stay up-to-date with new content! LinkedIn (linkedin.com/company/security-journey)  Instagram (https://www.instagram.com/securityjourney)YouTube (youtube.com/c/securityjourney)Twitter (twitter.com/SecurityJourney)Online (securityjourney.com)  CONTACT: hello@securityjourney.com Get your free VIBE Coding Field Guide: https://hubs.ly/Q043-zdS0

See All (33)

Trailer

About

Automation, Generative AI, Shift Left - the world of application security is evolving fast, and so are the conversations that shape it. Welcome to The Security Champions Podcast, the go-to resource for insights from the front lines of application security. The podcast is cohosted by Michael Burch, Director of Application Security for Security Journey, and Dustin Lehr, the Director of AppSec Advocacy. Each month, one of them shares a candid conversation with security leaders, engineering voices, and software experts.  From championing secure development practices to navigating real-world challenges in modern SDLCs, this show explores how teams are scaling appsec, strategy and culture.  New Episodes drop monthly, with even more security content at https://www.securityjourney.com/ Always remember: Security is a Journey, not a Destination. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ This podcast is sponsored by Security Journey. FOLLOW US to stay up-to-date with new content!X (https://x.com/SecurityJourney)LinkedIn (https://www.linkedin.com/company/7574213)Instagram (https://www.instagram.com/securityjourney/?hl=en)YouTube (https://www.youtube.com/@UCBVPnBCNcZqx_WAuCsV6BuA )Online (securityjourney.com)CONTACT: hello@securityjourney.com

Information

  • Creator
    Mike Burch
  • Years Active
    2023 - 2026
  • Episodes
    33
  • Rating
    Clean
  • Copyright
    © 2026 The Security Champions Podcast
  • Show Website
    The Security Champions Podcast