Why the Security Silo Won't Survive the AI Era

Security teams have been outnumbered 50 to 100 to 1, and the old model of finding vulnerabilities and tossing them to engineers is breaking down. Anshuman Bhartiya, Staff Security Engineer at Lyft, explains why that silo has to collapse and what replaces it.

"We have to take a step back. We have to think about entire vulnerability classes and we have to think about, okay, how has the SDLC changed now? Are developers using coding agents?"

Anshuman is reframing where security teams should focus their energy.

Instead of filing individual bugs and handing them off, security engineers need to understand what developers are actually building and how. If coding agents are generating the code, security teams should use AI to integrate guardrails directly into that workflow. The goal is working alongside engineers, not blocking them.

Full episode on Hidden In Plaintext: https://youtu.be/BwVdYa-72Lk