If you trust this link, click it to continue.
http://brakeingsecurity.com/josh-grossman-building-appsec-programs-bridging-security-and-developer-gaps