EP8 - Justin Anderson: How LinkedIn Built Their Vulnerability Management Program

Future of Application Security

Three years ago LinkedIn had no vulnerability management program in place. Today that’s a completely different story. Over the past three years, they built their program from scratch and rapidly scaled to keep their 25k+ employees and 800 million users safe and secure.

How did LinkedIn achieve this scale so quickly and what lessons were learned along the way? On today’s episode we speak with Justin Anderson — LinkedIn’s Head of Vulnerability Management who was tasked with building out the company’s program. Justin’s experience spans the US Air Force and MITRE offers a unique perspective on what it takes to overcome the challenges of scaling a security program.

Topics discussed in this episode:

• What Justin and his team prioritized as they began building LinkedIn’s vulnerability management program.
• How the scalability challenges Justin faced in the military prepared him for the challenges of scaling LinkedIn’s vulnerability management program.
• How to incentivize developers to take security seriously and create a win-win for developers and security.
• Why Justin is skeptical of the traditional security champions program model and what he recommends teams doing instead.
• How security is evolving and what Justin believes security teams of the future will look like.