In this episode of the Modern Security Podcast we were joined by Jamie Finnigan, Director of Product Security  @HashiCorp , and discussed how the security team prioritizes their time, rolling out developer-friendly security tooling, and much more. 2:08 - Intro to Jamie Finnigan 7:41 - The Product Security Org at HashiCorp 11:27 - How do you determine what to focus on? 16:40 - What does success look like for security at HashiCorp 20:50 - The difference between outputs and outcomes 25:52 - The Creation of Bandit 30:37 - HashiCorp Product Security Model 34:14 - Developer-Friendly Security Tooling 39:56 - Tool selection 46:09 - Eliminating SSRF via Secure Defaults 53:22 - Overview of the Secure Defaults Approach 59:16 - Empathy in Security