Jamie Dicken – Medium

Jamie Dicken

Jamie Dicken

Reflections on AppSec Today

Key Themes and Lessons from last week’s LocoMocoSec Conference

Jul 22

Picture of Kaua’i from Unsplash. Kaua’i was the island where the LocoMocoSec conference was held in 2024.

Jul 22

Jamie Dicken

Take off the training wheels

Leadership lessons from teaching my 5-year-old how to ride a bike

Jun 6, 2023

A child riding a bike with training wheels through sprinklers, and another child running in the distance.

Jun 6, 2023

Jamie Dicken

Letting go of perfect: scaling threat modeling

Lessons from the soccer field on embracing iterative skill development to better secure our products and enable our businesses

May 30, 2023

Letting go of perfect: scaling threat modeling

May 30, 2023

Jamie Dicken

Threat Modeling: How do you know when you’re done?

A pep talk for software engineers as they first learn how to threat model

Jan 12, 2023

Scrabble letters arranged to say “Done is better than perfect,” with the trailing T imperfectly aligned.

Jan 12, 2023

Jamie Dicken

A new cyber kill chain mnemonic

So you can stop Googling it and focus on threat modeling

Oct 24, 2022

Three padlocks with a chain running through them. The left-most padlock is laying on the table unlocked.

Oct 24, 2022

Jamie Dicken

Friction as Threat Deterrence

Using Attacker Math to your advantage when threat modeling

Aug 7, 2022

A graph titled “Attacker ROI: Points of Diminishing Returns.” On the X axis is the willingness of an attacker to continue an attack. There are 3 intersecting lines representing control additions. On the graph are 5 bars representing different attackers. Upon the application of the first control, the amateur attacker’s willingness abruptly stops. Upon the application of a second and third control, 3 additional attackers cease interest, leaving only the Nation State Actor willing to continue.

Aug 7, 2022

Jamie Dicken

Threat Modeling: Did we do a good job?

A deeper dive into the last question in threat modeling

Jul 25, 2022

A blue magnetic question mark is placed off-center on a pink gradient background.

Jul 25, 2022

Jamie Dicken

True Confessions of a Cybersecurity Manager Reviewing Entry-Level Resumes

How to differentiate yourself on (digital) paper among a big pool of similarly qualified candidates.

Jul 17, 2022

An untidy stack of papers and folders, illustrative of the dozens of resumes hiring managers receive and must review for junior-level positions.

Jul 17, 2022

Jamie Dicken

Troubleshooting your cybersecurity career transition challenges

Cybersecurity has a talent pipeline problem. But what can you, as a candidate, do about it in the meantime?

May 19, 2022

The same inverted pyramid as before, annotated to indicate what filter criteria can exclude you from candidacy. If you are filtered out during the “Collect Applications” phase, the filter criteria was the Basic Screening Questions. If you were filtered out during resume review, the filter criteria was your resume itself. If you were filtered out between the HR Phone Screen and Full Interview, your interview experience was to blame.

May 19, 2022

Jamie Dicken

Three Triggers that Derail Security Conversations with App Teams

Getting large security remediations prioritized can be hard enough. Don’t make it worse.

Aug 26, 2020

Two buffalo fighting in a road while traffic builds up, a metaphor for verbal triggers derailing meaningful progress.

Aug 26, 2020

Jamie Dicken

Jamie Dicken

Cybersecurity leader | Product Security | Software Engineering | Teacher | Writer | Mentor | DE&I Advocate | Boy Mom | Own views | She/her/hers

Following

Help
Status
About
Careers
Press
Blog
Privacy
Terms
Text to speech
Teams