WeAreDevelopers Logo WeAreDevelopers
Sign in
For You LIVE
World Congress 2021 • Jun 30, 2021

Building Security Champions

Tanya Janca

Stop bottlenecking your DevOps pipeline due to AppSec staffing shortages. Discover a practical, six-step framework to transform everyday developers into an active first line of defense as security champions.

Pause
Mute Enter Fullscreen
#1 about 5 min

Scaling security teams through developer advocates

Why organizations must rely on software developers to overcome the severe shortage of application security professionals.

#2 about 3 min

Defining the security champion role in software teams

How interested developers act as the primary security advocate and first line of defense within their teams.

#3 about 4 min

Recruiting the right security champions without forcing participation

Strategies to attract volunteers by providing opportunities for developers to reveal their interest naturally.

#4 about 7 min

Engaging software developers deeply in secure engineering practices

Methods to involve champions deeply through incident response participation, appropriate secret sharing, and team building.

#5 about 11 min

Teaching and coaching security concepts for lasting impact

Providing scoped training on secure coding, architecture, and tooling while delegating appropriate responsibilities effectively.

#6 about 3 min

Recognizing champion efforts publicly and formally

How to provide meaningful recognition in performance reviews and among peers to validate supplementary work.

#7 about 3 min

Rewarding champions for positive security behaviors

Reinforcing effective behavior with security-related gifts, dedicated mentoring time, and varied tokens of appreciation.

#8 about 6 min

Maintaining long-term momentum and consistency in security programs

Why treating security culture as a continuous practice prevents program collapse and ensures long-term viability.

#9 about 10 min

Audience Q&A on security risks and team models

Questions concerning artificial intelligence risks, managing security incidents, and structuring team representation appropriately.

Matching moments

48 sec

Scaling knowledge through security champions programs

Stefania Chaplin · World Congress 2022

5:25 min

Shifting left and creating internal security champion programs

Vandana Verma Sehgal · LIVE

12:35 min

Q&A on security automation and building champions programs

Mathias Tausig · LIVE

2:39 min

Establishing a center of excellence and security champions

Nazneen Rupawalla · World Congress 2022

2:27 min

Nominating accountable security champions to drive adoption

Nazneen Rupawalla · World Congress 2022

1:22 min

Addressing the shortage of application security specialists

Joseph Katsioloudes Joseph Katsioloudes · World Congress 2025

More from World Congress 2021

Micro Frontends with Module Federation: Why and How? thumbnail
45:40
about 5 years ago

Micro Frontends with Module Federation: Why and How?

Manfred Steyer

Data Science on Software Data thumbnail
48:10
about 5 years ago

Data Science on Software Data

Markus Harrer

The journey from developer to devops - what i've learnt along the way thumbnail
42:44
about 5 years ago

The journey from developer to devops - what i've learnt along the way

Liam Hurrel, Alireza Chegini

How Data is Shaping our Games thumbnail
43:30
about 5 years ago

How Data is Shaping our Games

Johanna Pirker

Cross platform Augmented Reality development with React Native thumbnail
40:50
about 5 years ago

Cross platform Augmented Reality development with React Native

Vladimir Novick

How to Build a Monetization Strategy Based on User's in-app Behavior thumbnail
38:59
about 5 years ago

How to Build a Monetization Strategy Based on User's in-app Behavior

Natalie Sieradzki

Related videos

Secure Code Superstars: Empowering Developers and Surpassing Security Challenges Together thumbnail
23:34
World Congress 2022 • over 4 years ago

Secure Code Superstars: Empowering Developers and Surpassing Security Challenges Together

Stefania Chaplin

Organizational Change Through The Power Of Why - DevSecOps Enablement thumbnail
26:50
World Congress 2022 • over 4 years ago

Organizational Change Through The Power Of Why - DevSecOps Enablement

Nazneen Rupawalla

Simple Steps to Kill DevSec without Giving Up on Security thumbnail
21:53
World Congress 2025 • about 1 year ago

Simple Steps to Kill DevSec without Giving Up on Security

Isaac Evans

Software Security 101: Secure Coding Basics thumbnail
1:58:48
World Congress 2021 • about 5 years ago

Software Security 101: Secure Coding Basics

Thomas Konrad

Security Pitfalls for Software Engineers thumbnail
27:32
World Congress 2023 • almost 3 years ago

Security Pitfalls for Software Engineers

Jasmin Azemović

DevSecOps culture thumbnail
16:00
World Congress 2023 • almost 3 years ago

DevSecOps culture

Ali Yazdani

Related articles

From learning to earning

Jobs that call for the skills explored in this talk.