From the early days of software bugs through to the modern day, software security practitioners have had to adapt to a cascade of paradigm shifts. As technology has increased in complexity, so have the attack vectors. Not only have we played cat and mouse with the attackers and their evolving attacks, but we’ve had to adapt to how software development has gone from Waterfall to Agile to DevOps.As security finally appears to have won enough credibility to be given a voice in software development, there are opportunities and risks. In this talk, I will focus on software security specifically, some of its history, the current challenges, and how you as a security subject matter expert can help shape its future.