Modern application security teams know that building secure applications doesn’t happen by accident; it requires security tools designed to bring value to the development lifecycle and a fair amount of organizational savviness to successfully influence technology teams. This talk will describe how Target’s DevSecOps team combined technology and organizational psychology principles to build secure applications at the scale of a $100B retail operation.