
← The Elephant in AppSec3 dec 2025 · 43 min
Why AppSec Needs More Than Just a Checkbox ⎢ Marcos Vinicius Cassel
<p>Today, I’m joined by Marcos Vinicius Cassel, Application Security Manager at PowerSchool.</p><p>With over a decade of experience in the information security space, as a CISSP, ISO 27001 Lead Auditor, and a passionate technologist, Marcos has led security initiatives across multiple industries. </p><p>He also previously led the OWASP Porto Alegre Chapter, and fun fact: we first met while volunteering together at BSides SF!</p><p>In this episode, we dive into the real value of certifications in application security, how they can provide structure and credibility, but shouldn’t define a professional’s entire skill set. </p><p>We also unpack the balance between compliance and risk management and between privacy and innovation, and why strong communication between security and engineering teams is more essential than ever.</p><p>And with that, get ready to hear Marcos’ opinions.</p><p>Dive right in!</p>