WeAreDevelopers Logo WeAreDevelopers
Sign in
For You LIVE
World Congress 2021 • Jun 30, 2021

Building Security Champions

Tanya Janca

Stop bottlenecking your DevOps pipeline due to AppSec staffing shortages. Discover a practical, six-step framework to transform everyday developers into an active first line of defense as security champions.

Pause
Mute Enter Fullscreen
#1 about 5 min

Scaling security teams through developer advocates

Why organizations must rely on software developers to overcome the severe shortage of application security professionals.

#2 about 3 min

Defining the security champion role in software teams

How interested developers act as the primary security advocate and first line of defense within their teams.

#3 about 4 min

Recruiting the right security champions without forcing participation

Strategies to attract volunteers by providing opportunities for developers to reveal their interest naturally.

#4 about 7 min

Engaging software developers deeply in secure engineering practices

Methods to involve champions deeply through incident response participation, appropriate secret sharing, and team building.

#5 about 11 min

Teaching and coaching security concepts for lasting impact

Providing scoped training on secure coding, architecture, and tooling while delegating appropriate responsibilities effectively.

#6 about 3 min

Recognizing champion efforts publicly and formally

How to provide meaningful recognition in performance reviews and among peers to validate supplementary work.

#7 about 3 min

Rewarding champions for positive security behaviors

Reinforcing effective behavior with security-related gifts, dedicated mentoring time, and varied tokens of appreciation.

#8 about 6 min

Maintaining long-term momentum and consistency in security programs

Why treating security culture as a continuous practice prevents program collapse and ensures long-term viability.

#9 about 10 min

Audience Q&A on security risks and team models

Questions concerning artificial intelligence risks, managing security incidents, and structuring team representation appropriately.

Matching moments

48 sec

Scaling knowledge through security champions programs

Stefania Chaplin · World Congress 2022

5:25 min

Shifting left and creating internal security champion programs

Vandana Verma Sehgal · LIVE

2:25 min

How software developers can become champions

Tanya Janca · LIVE

3:22 min

Defining the role of a security champion

Tanya Janca · LIVE

6:39 min

Recruiting and identifying ideal security champions

Tanya Janca · LIVE

12:35 min

Q&A on security automation and building champions programs

Mathias Tausig · LIVE

More from World Congress 2021

Micro Frontends with Module Federation: Why and How? thumbnail
45:40
about 5 years ago

Micro Frontends with Module Federation: Why and How?

Manfred Steyer

Data Science on Software Data thumbnail
48:10
about 5 years ago

Data Science on Software Data

Markus Harrer

The journey from developer to devops - what i've learnt along the way thumbnail
42:44
about 5 years ago

The journey from developer to devops - what i've learnt along the way

Liam Hurrel, Alireza Chegini

How Data is Shaping our Games thumbnail
43:30
about 5 years ago

How Data is Shaping our Games

Johanna Pirker

Cross platform Augmented Reality development with React Native thumbnail
40:50
over 5 years ago

Cross platform Augmented Reality development with React Native

Vladimir Novick

How to Build a Monetization Strategy Based on User's in-app Behavior thumbnail
38:59
over 5 years ago

How to Build a Monetization Strategy Based on User's in-app Behavior

Natalie Sieradzki

Upcoming sessions on this topic

Open session

Supply Chain Security for the Everyday Engineer

  • Pradumna Saraf

    Kestra Technologies

    Quality Assurance Engineer

Open session

Beware of Strangers Bearing Code: Open Source Trust in the Agent Era

  • Vikram Vaswani

    Consultant

Open session

How is SWE & EM roles are changing in the age of AI

  • Amol Sharma

    Stripe

    Engineering Manager

Open session

From Prompt Engineering to Harness Engineering: Building Observable and Governed GenAI Systems

  • Lakshmi Devi Prakash

    JPMorgan Chase

    VP, Applied AI/ML Lead

Open session

Shipping MCP to Real Users: Scaling, Auth, and the PII Leak You Didn't See Coming

  • Hadar Geva

    Myop

    CTO & Co-founder

Open session

AI Is the Easy Part: Why Faster Engineers Don't Make Faster Businesses

  • Bharat Sharma

    Booking

    Senior Engineering Manager

Related videos

Building Security Champions thumbnail
42:40
LIVE • over 4 years ago

Building Security Champions

Tanya Janca

Secure Code Superstars: Empowering Developers and Surpassing Security Challenges Together thumbnail
23:34
World Congress 2022 • over 4 years ago

Secure Code Superstars: Empowering Developers and Surpassing Security Challenges Together

Stefania Chaplin

Organizational Change Through The Power Of Why - DevSecOps Enablement thumbnail
26:50
World Congress 2022 • over 4 years ago

Organizational Change Through The Power Of Why - DevSecOps Enablement

Nazneen Rupawalla

Simple Steps to Kill DevSec without Giving Up on Security thumbnail
21:53
World Congress 2025 • about 1 year ago

Simple Steps to Kill DevSec without Giving Up on Security

Isaac Evans

Software Security 101: Secure Coding Basics thumbnail
1:58:48
World Congress 2021 • over 5 years ago

Software Security 101: Secure Coding Basics

Thomas Konrad

Security Pitfalls for Software Engineers thumbnail
27:32
World Congress 2023 • about 3 years ago

Security Pitfalls for Software Engineers

Jasmin Azemović

Related articles

From learning to earning

Jobs that call for the skills explored in this talk.