Recurring vulnerabilities like SQL injection create a cycle of context switching and developer burnout that goes beyond the OWASP Top 10.
Misaligned KPIs and communication gaps between developers, security, and operations teams can be bridged by creating a culture of security champions.
Empower developers with free OWASP tools like Zap and dependency checkers, and integrate automated scanning and just-in-time training directly into the CI/CD pipeline.
Applying the "sharpen the saw" principle through continuous learning and maintaining personal balance helps prevent burnout and improves developer flow.
Build a stronger security posture by prioritizing time to learn, addressing technical debt, adopting an empathetic approach, and using OWASP resources.
To move from development to security, start internal conversations, join a security champion program, and explore your company's specific security priorities.
Beyond the OWASP Top 10, developers can learn security through internal hackathons, online platforms, community meetups, and exploring red team versus blue team concepts.
48:02Tanya Janca
28:01Tino Sokic
21:53Isaac Evans
29:50Kevin Lewis
27:36Tino Sokic
27:32Jasmin Azemović
22:18Michael Wildpaner
24:01Jackie
Jobs that call for the skills explored in this talk.
Punk Security Ltd.
Eliassen Group
Cary, United States of America
