Daniel Kennedy

Information security manager with an understanding of the business, application development, and information security. Possesses progressive experience in financial services technology. 

Managed 20+ associates with cross functional offshore/onsite engineering teams. Possesses relevant certifications, including NASD Series 7, NYU Web Development, CISSP, and Certified Ethical Hacker (C|EH). 

Hands on program manager recognized for leadership in planning, scheduling, crisis/risk management, and definition of scope for information technology and security projects. A proven track record developing technical solutions that align to business needs, delivering on budget and on schedule.

Specialties: Technology risk assessment, information security, physical security, business continuity / disaster recovery planning...

Research Director, Information Security & Networking

Manage all phases of the user driven analyst research for information security and networking. Offer coverage of and insights in the application security space.

Please, no more superficial application security takes on the Claude Code Security announcement. My feed can't take it. We need to be able to distinguish between a meteor strike and the continuation of decade-long trend lines.

• It's not a drop-in replacement.
• It's not a substitute for runtime security.
• It's not the first AI code security tool from an AI provider (examples: CodeMender, Aardvark), and there are many other examples of automated code security remediation using AI.
• It's not Anthropic's first foray or announcement in this arena (see Claude Code Security Reviewer).
• The scanner hasn't been the point of differentiation in application security testing (AST) for a while now, it's about developer workflow and noise reduction.
• Developers have been handling the tactical side of this for a long time. 'Traditional appsec boundaries', if they ever existed, eroded a long time ago. It's been a team sport, most appsec professionals are consumed with architecture and process validation.
• Vulnerabilities != incidents: if you waved a magic wand and solved every code vulnerability tomorrow (you can't), there would still be security incidents an enterprise needs tooling to manage. 
• The stock market is a voting machine, not a weighing one. It reacts to narratives and sentiment in the short term, the original 'vibes', not necessarily the fundamental utility of a tool.

The hard problems in AppSec haven't been about "the scan" since shift-left made speed a priority over depth, so AST could fit within dev lifecycles.

This vendor is removing inhibitors to the use of their primary product, and it has been an area of focus for a while now. 

𝐒𝐡𝐨𝐮𝐥𝐝 𝐲𝐨𝐮 𝐭𝐫𝐚𝐜𝐤 𝐢𝐭?

Absolutely. AppSec is the most resource-strained area in InfoSec. In a time where code creation is becoming exponential, we need tools that accelerate resolution and pay down technical debt. Time will tell.

undefined undefined

CISO Whisperer | Former Financial Services CISO & Security Research Authority

AI will eat most of the jobs in the next 2-5 years,

𝗥𝗼𝗹𝗲𝘀 𝗮𝘁 𝗵𝗶𝗴𝗵 𝗿𝗶𝘀𝗸:
 • Professional fax cover-sheet designer
 • VHS rewinder
 • Medieval town crier
 • Mall ninja sword tester
 • Radio Shack manager
 • “Have you tried turning it off and on?” Tier-1 specialist
 • Blockbuster late-fee negotiator
 • Corporate synergy translator
 • Elevator button pusher
 • Clippy emotional support specialist
 • MFA enrollment apology specialist
 • Dot-matrix printer paper separator
 • Video store genre re-shelving specialist
 • AOL trial CD distributor
 • Zoom waiting-room DJ
 • Hashtag optimization intern
 • Office “reply-all” damage control analyst
 • Legacy VPN appliance babysitter

𝗥𝗼𝗹𝗲𝘀 𝘁𝗵𝗮𝘁 𝗮𝗿𝗲 𝘀𝗮𝗳𝗲:
 • Executive apology speechwriter
 • Incident response finger-pointing coordinator
 • Professional conference badge collector
 • Lunch-and-learn sandwich reviewer
 • Nation-state attribution enthusiast
 • Guy who says “let’s take this offline”
 • Slack status philosopher
 • Office thermostat warlord
 • Chief Culture Evangelist
 • Professional podcast guest who “loves what you guys are doing”
 • Professional mic-not-working guy on webinars
 • Office fridge passive-aggressive note author
 • PowerPoint slide transition critic
 • Corporate offsite trust-fall facilitator
 • Professional “per my last email” drafter
 • Strategic pause facilitator
 • Guy who says “that’s not how attackers think” in every meeting
 • AI ethics panel moderator

"Daniel Kennedy, principal research analyst for the information security channel at S&P Global Market Intelligence, said DockSec could help with one of the most pressing issues in application security: tools reporting more findings than can be addressed functionally. Its approach, he said, is to provide context by explaining vulnerabilities and then using AI to consider the context of the particular environment and suggest fixes."

https://lnkd.in/eQJnMRsS

"Security review is collapsing into the IDE."

2004 wants that hot take back.

taplio

Daniel Kennedy's Linkedin Analytics

Daniel Kennedy

Performance ScoreDaniel Kennedy's LinkedIn Performance

Daniel Kennedy's Best Posts (last 30 days)

Ready to grow your LinkedIn presence?

taplio

.css-6ytdur{background-image:linear-gradient(284deg, rgba(39, 43, 72, 1) 0%, rgba(33, 47, 183, 1) 100%);color:transparent;-webkit-background-clip:text;background-clip:text;}Daniel Kennedy's Linkedin Analytics

Daniel Kennedy

Performance Score.css-goub6s{font-size:var(--chakra-fontSizes-md);font-weight:500;color:var(--chakra-colors-gray-600);display:block;margin-top:var(--chakra-space-1);}Daniel Kennedy's LinkedIn Performance

Daniel Kennedy's Best Posts .css-1emoo84{font-size:var(--chakra-fontSizes-md);font-weight:400;color:var(--chakra-colors-gray-600);}(last 30 days)

Ready to grow your LinkedIn presence?

Daniel Kennedy's Linkedin Analytics

Performance ScoreDaniel Kennedy's LinkedIn Performance

Daniel Kennedy's Best Posts (last 30 days)