Security Champions

Security Champions are a key element of any AppSec team, since they create a cross-functional team focused on Application Security.

What is a Security Champion?

  • Security Champions are active members of a team that may help to make decisions about when to engage the Security Team
  • Security Champions act as the “voice” of security for the given product or team
  • Security Champions assist in the triage of security bugs for their team or area

(see definition here)


The main purpose of this working session is to discuss the role of Security Champions within organizations, and how Security Champions’ skills can best be utilized across organizations. The session will also discuss the need for a better definition of the role of Security Champion.


  • How to define Security Champions role, responsibilities and OKR
  • How to create a network of Security Champions
  • Forum for Security Champions to share their experiences
  • The importance of being supported by the corporate Security Policy
  • How to ‘create’ Security Champions?
  • How to reward Security Champions?
  • Do Security Champions have a path into Application Security profession?
  • Is being a Security Champions worth including in your LinkedIn profile?
  • What is the Security Champion’s role in Threat Modeling?


The target audience for this Working Session is:

  • Security Champions
  • CISOs
  • Developers



Related Working Session(s)

Back to list of all Working Sessions and Tracks

Edit this page here