Let's Talk Software Security!

Denver, CO, US

2,861 members · Public group

Organized by Dustin Lehr and 2 others

What we’re about

We're an online group dedicated to generating new and innovative ideas for building high quality and secure software.

Engineering and security leaders, developers, program managers, scrum masters, SDLC enthusiasts, QA engineers: all are welcome to come and share tips, tricks, and ideas for making DevSecOps, Shift Left, and Security By Design concepts work efficiently for our organizations.

We meet every month and have a 2-hour "open discussion" on a specific topic to share ideas, challenge, and support each other as we all tackle the difficulties of software security.

Always global, always remote. Come join us to share, collaborate, and be heard - or just to listen and learn.

This is a practitioner "safe zone" for everyone to openly share ideas without worrying about being solicited. Vendors are encouraged to join, and can even mention their own products/services as long as they are relevant to the conversation.

Notes: Our sessions are not recorded and no information about the participants is posted publicly in order to protect your privacy, besides your meetup username/profile which is posted as having RSVP'd to an event. Your opinions are your own and do not necessarily represent the views of your employer. We also follow Chatham House Rules.

Featured event

Wed, May 14, 2025, 2:00 PM UTCIs Using AI Really That Insecure?

Link visible for attendees

Is Using AI Really That Insecure? cover photo

Let’s unpack the security community’s skepticism around AI and explore what’s really behind the fear. Is it justified? What’s hype vs. reality? We’ll dig into the core concerns about adopting AI technologies and examine practical ways to reduce risks while still embracing innovation.

We’ll Demystify the Jargon:
What do terms like MCP, LLM, AI, RAG, Slopsquatting (yes, that’s a thing!) and others actually mean and why should we care?

Some Other Questions We'll Explore:

Why should/shouldn't we trust content generated by LLMs?
What are the risks of having a RAG app built by and for AppSec Professionals?
Why is the strategy to secure AI any different than leveraging any other 3rd party code - Paid or Open Source?

At Let’s Talk Software Security, we don’t host "expert" speakers—we engage in open conversations driven by the experiences and insights of everyone in the room. Whether you’re an AppSec engineer, developer, or security leader, your voice matters.

Join us as we challenge assumptions, share lessons learned, and refine our approach to building secure applications in an automated world.

Note: We do not record our sessions and follow Chatham House Rules to ensure a candid, open, and honest discussion.