Semgrep eventsAI tools can now scan code, review pull requests, generate fixes, and even write security tooling. And that raises an uncomfortable question: If machines can do most of the security work, what should future AppSec engineers actually learn?
In this episode of Security Rulez, Dr. Katie Paxton-Fear is joined by Anshuman Bhartiya, Application Security Engineer turned Tech Lead at Lyft to debate what the AppSec role looks like in an agent-driven world.
With just a handful of security engineers supporting a large engineering organization, Anshuman has been experimenting with how automation and agentic systems can help small AppSec teams scale. Instead of manually operating tools, the next generation of security engineers may act more like orchestrators, directing agents that perform scans, reviews, and security analysis.
But if agents are doing the operational work, what should the human security engineer focus on? We’ll peer into our crystal ball and answer:
What is the future of AppSec Engineer as a role? And what will the AppSec engineer of the future specialize in?
How do AppSec engineers become orchestrators rather than tool-users?
Should AppSec engineers still learn how to code in the AI era?
How do leaders mentor junior engineers when AI can already write large amounts of code?
And are security teams debating the wrong questions about AI entirely?
Expect strong opinions, practical lessons from scaling security with a small team, and a candid conversation about how AppSec engineers should adapt to the AI era.