WeAreDevelopers Logo WeAreDevelopers
Sign in
For You LIVE
World Congress 2026 Europe • Jul 10, 2026 • Session details

Automated Security for the Entire SDLC

Carey Liu

Are traditional security models slowing your AI-assisted deployments? Discover how TikTok uses LLMs to inject security into technical specs before a single line of code is written.

Pause
Mute Enter Fullscreen
#1 about 4 min

Managing security risks in AI-accelerated development processes

Generating code rapidly with AI introduces vulnerabilities that are costly to fix if discovered late.

#2 about 4 min

The hidden costs of late security intervention

Unplanned rework, staging vulnerabilities, and production incidents disrupt workflows when security is an afterthought.

#3 about 3 min

Embedding security controls during the design phase

Proactive security validation integrates control requirements into technical design documents prior to code generation.

#4 about 4 min

Validating technical designs with an AI security agent

A multi-stage validation workflow scopes relevant domains and abstracts risks before writing code.

#5 about 3 min

Actionable security guidance in product validation reports

Exposing potential attack chains and compliance consequences helps engineers address critical business logic flaws.

#6 about 3 min

Shifting security from unhelpful blockers to collaborative partners

Integrating native validation tools into existing collaboration platforms creates a positive feedback loop with developers.

#7 about 2 min

Scaling AI-native security capabilities across the system

Matching engineering velocity requires continuous learning and embedding validation seamlessly into code generation workflows.

#8 about 2 min

Validating AI-generated vulnerabilities with developer feedback

Utilizing user feedback loops helps identify the most accurate security risks and improves agent training data.

#9 about 2 min

Adopting design-stage security for external development teams

Open-sourcing security prompts and agent skills enables independent developers to run early validation checks.

#10 about 2 min

Testing probabilistic large language models against new threats

Maintaining a golden test set ensures consistent security coverage when upgrading internal foundational models.

#11 about 3 min

Balancing human engineering insight with automated security tools

Fostering a security-by-design culture combined with strict internal policies simplifies identifying issues efficiently.

#12 about 2 min

Reviewing deterministic security controls and compliance frameworks

Continuous iteration of control points against industry best practices reduces false positives in automated validation.

Matching moments

2:33 min

Introduction to security advocacy and automation testing

Chris Heilmann Chris Heilmann +2 · LIVE

4:15 min

Security integration and AI skepticism in developer tooling

Chris Heilmann Chris Heilmann +2 · LIVE

3:05 min

Injecting automated security into mobile CI/CD pipelines

Moataz Nabil Moataz Nabil · LIVE

5:25 min

Shifting left and creating internal security champion programs

Vandana Verma Sehgal · LIVE

2:58 min

Managing vulnerabilities in auto-generated software development processes

Chris Wysopal Chris Wysopal +2 · World Congress 2024

2:09 min

Shifting security left using the DevSecOps approach

Aarno Aukia · LIVE

More from World Congress 2026 Europe

Building the Nervous System of AI - Michael Kagan (NVIDIA) thumbnail
29:17
3 months ago

Building the Nervous System of AI - Michael Kagan (NVIDIA)

Michael Kagan, Sead Ahmetović

Five Things in Tech that Matter Now - WeAreDevelopers World Congress 2026 Closing Keynote thumbnail
19:41
3 months ago

Five Things in Tech that Matter Now - WeAreDevelopers World Congress 2026 Closing Keynote

Christian Heilmann

The Sound of Your Secrets: Teaching Your Model to Spy, So You Can Learn to Defend thumbnail
32:06
3 months ago

The Sound of Your Secrets: Teaching Your Model to Spy, So You Can Learn to Defend

David vonThenen

Super scaling for the Super Bowl: How to survive 30 million users hitting your backend in 30 minutes thumbnail
35:13
3 months ago

Super scaling for the Super Bowl: How to survive 30 million users hitting your backend in 30 minutes

Irina Branovic

Running Secure Life Science Research at Scale using Hybrid GPU HPC and Kubernetes 🧬 thumbnail
24:23
3 months ago

Running Secure Life Science Research at Scale using Hybrid GPU HPC and Kubernetes 🧬

Jeremy Murray

Angstfreude - AI and Corporate Culture - The Thrill and the Threat thumbnail
30:26
3 months ago

Angstfreude - AI and Corporate Culture - The Thrill and the Threat

Axel Ebert, Karin Krobath

Related videos

The transformative impact of GenAI for software development and its implications for cybersecurity thumbnail
25:19
World Congress 2024 • about 2 years ago

The transformative impact of GenAI for software development and its implications for cybersecurity

Chris Wysopal

The New AI Security Stack: Observe, Detect, Protect thumbnail
30:16
World Congress 2026 Europe • 3 months ago

The New AI Security Stack: Observe, Detect, Protect

Milin Desai, Christian Trummer, Jyoti Bansal, Tomislav Tipurić

Why Security-First Development Helps You Ship Better Software Faster thumbnail
22:18
World Congress 2025 • about 1 year ago

Why Security-First Development Helps You Ship Better Software Faster

Michael Wildpaner

Real-World Security for Busy Developers thumbnail
29:50
World Congress 2025 • about 1 year ago

Real-World Security for Busy Developers

Kevin Lewis

Spot, Squash, Secure: Fighting Security Bugs with GitHub Copilot thumbnail
22:56
World Congress 2026 Europe • 3 months ago

Spot, Squash, Secure: Fighting Security Bugs with GitHub Copilot

Malte Lantin, Marie Theresa Brosig

Can Machines Dream of Secure Code? Emerging AI Security Risks in LLM-driven Developer Tools thumbnail
35:37
LIVE • about 2 years ago

Can Machines Dream of Secure Code? Emerging AI Security Risks in LLM-driven Developer Tools

Liran Tal

Related articles

From learning to earning

Jobs that call for the skills explored in this talk.