[giantg2]

I feel like it's hard to say. I'm a midlevel dev, so I have no real authority.

I was in charge of elevating some code when I first started. I screwed it up and had to spend 6 hours redeploying while the team waited. It did not feel good telling everyone about the situation. It turned out ok in the end.

I was the ASC for a team (actually 6 teams across 2 departments). The application had a serious vulnerability that required multiple people to address. I brought up the issue with my boss - not prioritized. Talked to my department head next. They told me they weren't going to address the issue because they have a backup system. So I added if they ever tested the system or had documentation on how to restore from it - nope. So I did all I could do. All the tech leads were shocked when I talked to them about it. No way was I going to own the security for that POS system, so I posted to a different area of the company.

I worked as a tech lead (unofficially as I'm only a midlevel dev - seeing any issues with this company so far?). Oddly enough, I don't remember any serious issues even though this was the most authority I was given (took really, the others have me their trust/approval/etc to lead them). I had a great team and we were able to overcome a few challenges and provide business value while performing some major technical upgrades.

[chris_j]

There are a couple of terms here that I'm not familiar with.

What is "elevating code"? (I'm trying to work out of autocorrect has screwed up the word "deploying".)

What is an ASC?

[giantg2]

I use elevate and deploy interchangeably sometimes. The package or files are already deployed in the test region, so you are elevating them to the next region (PRD). You could deploy the same code to the test region again, which wouldn't be an elevation since it's already there, and deploy would make more sense.

ASC is Application Security Champion. Essentially the role requires some internal security training then you are responsible for following the processes to identify and remediate vulnerabilities.

[chris_j]

Many thanks for the explanations.