You've heard that DevSecOps is the latest fashion, but what does that actually mean? Is it just a trendy rebranding of what we've always done or are there really some new technologies and practices we can use to improve security?
In this session we will blast through a quick review of DevOps and then jump into the 5 steps to integrate effective DevSecOps into your security and DevOps programs. (Hint… it's all about the code).
Rich is the CEO of Securosis, a security research and analysis firm, and the CISO of DisruptOps, a cloud security automation platform based on his research. He has over 25 years of security experience and currently specializes in cloud security and DevSecOps, having starting working hands-on in cloud nearly 10 years ago. He is also the principle course designer of the Cloud Security Alliance training class, primary author of the latest version of the CSA Security Guidance, and actively works on developing hands-on cloud security techniques.
Prior to founding Securosis and DisruptOps, Rich was a Research Vice President at Gartner on the security team. Prior to his seven years at Gartner, Rich worked as an independent consultant, web application developer, software development manager at the University of Colorado, and systems and network administrator.
Guy Raz is a Sr. Systems Engineer at ExtraHop with previous experience as a Network Engineer and Solution Architect. As a Systems Engineer, Guy is one of the SMEs leading the unique ExtraHop approach to cloud-native NDR for the hybrid multi-cloud enterprise. Before joining the Systems Engineer team, Guy was one of the ExtraHop Solution Architects, responsible for conducting deep technical and business discovery sessions, assisting in troubleshooting and problem resolution during war-room and security/network investigations, and developing strategies for acquiring high-value data from the wire; requiring in-depth technical understanding of L2-L7 networking principles.
Before ExtraHop, Guy was a Network Engineer at Cox Communications, where he helped architect the next generation DOCSIS infrastructure to provide gig-speed internet to customers through automation in provisioning and quality assurance of end user experience.