Application Security - Question/Discussion on Chasing Down Remediation

Good Morning!

I have been doing appsec for about 6 years between two large fortune 100 companies (pen testing/DAST/SAST/vuln hunting/etc..).

Both companies have very different ideas around when the job ends for application security and I wanted to get opinions and figure out what is the "right thing" to do around chasing down app teams to make sure they implement fixes/remediation's for found vulnerabilities. A lot if this is security culture related as well.

1. Company 1 - Forced/tracked app …

application application security appsec companies cybersecurity dast doing down etc good hunting ideas job large opinions pen pen testing question remediation sast security testing vuln what is