Key takeaways: Ramifications of waiting to implement security Consider alignment before jumping to tools Look within your current team to see if skills are currently covered Tradeoffs of allocating resources to build tools vs buying Meet:  Johnathan Hunt is the VP of Security for GitLab, an open-source code repository and collaborative software development platform for large DevOps and DevSecOps projects.  He has been in the InfoSec and cybersecurity space for more than 20 years, and he has worked across several verticals including SaaS, financial, telecommunications, healthcare, government, and more. Johnathan is particularly passionate about bug bounty, supply chain security, and DevSecOps.  He has conducted many conference keynotes, podcasts, interviews, and blog series on these topics.  He holds numerous security certifications, has a master’s degree in information systems, and is currently pursuing a second master’s degree at Harvard University. If you have any questions for Johnathan, please feel free to reach out via: https://www.linkedin.com/in/johnathanhunt/ I hope you enjoyed the episode, the best place to connect with me is on Linkedin - https://www.linkedin.com/in/amirbormand (Amir Bormand). Please send me a message if you would like me to cover certain topics with future guests.