AppSec workflows
As an Application Security (AppSec) team member, you're the one closing the gap between what Northstar finds and what actually gets fixed. This page covers how the AppSec workflow runs, from onboarding an application through confirming a fix holds.
Your role in Northstar
As AppSec, you're typically responsible for:
Ensuring applications are tested for vulnerabilities before deployment to production.
Conducting testing and security assessment of all applications.
Prioritizing and driving remediation of issues and incidents.
Reviewing incident, issue, and observation data in Northstar.
Integrating security best practices into the software development life cycle.
Tracking compliance and reporting.
Bringing Contrast vulnerability data into your GitHub and Jira workflows using Contrast integrations.
Where a SOC Analyst is watching for active attacks, and a CISO is watching program-level trends, your view sits in between: you triage what Northstar surfaces, decide what is a priority for remediation, and drive it to closure.