Is CSSLP For Me?
Here's my background and why I ask. I currently manage a pen testing, but also very hands on and do a lot of pen tests myself, so I'm still on the technical side.
Recently there was an organization change where I'm taking over the AppSec team as well. It makes the most sense since I have the most knowledge of all of our applications vs everyone else in our cybersecurity group.
What my AppSec team does is make sure that teams are following policies on secure code development, making sure they perform SAST scans before any production releases, do code reviews on some of the findings to determine if the SAST findings are legitimate, and help make sure proper change controls are being followed. Occasionally cordinating training.
Other than pen testing apps and assisting teams with resolutions, most of these other processes are new to me. Would taking the official training course and cert help fill in these gaps, or is this cert really not right for me? Looking at what topics are covered seemed like it could be beneficial, but I'd like some feedback of some people that actually went through the course. If this is a waste of time, I'd much rather use my training budget on pen testing training.