WeAreDevelopers LIVE • Feb 1, 2022

Maturity assessment for technicians or how I learned to love OWASP SAMM

Mathias Tausig

Are you still waiting for late-stage penetration tests to catch critical vulnerabilities? Discover how OWASP SAMM empowers developers to shift security left directly into the IDE.

Starting at 1:11:54 · Watch from the beginning

Maturity assessment for technicians or how I learned to love OWASP SAMM thumbnail

Checking access…

Playback and chapters load privately for Free videos.

Matching moments

13:13 min

Answering audience questions on practical application security

Thomas Konrad · World Congress 2021

1:53 min

Transitioning toward DevSecOps with dynamic scanning and secrets management

Christoph Ruggenthaler · LIVE

5:25 min

Shifting left and creating internal security champion programs

Vandana Verma Sehgal · LIVE

5:30 min

Identifying non-coding software vulnerabilities and organizational risks

Tino Sokic · World Congress 2023

26:47 min

Exploring pathways to application security careers and research workflows

Vandana Verma Sehgal · LIVE

2:33 min

Introduction to security advocacy and automation testing

Chris Heilmann

Chris Heilmann +2 · LIVE

More from WeAreDevelopers LIVE

Humans in the Loop: Storytelling in Tech thumbnail

Humans in the Loop: Storytelling in Tech

Christian Heilmann +2

4 days ago

WeAreDevelopers LIVE: Your Brain Is Lying to You: Cognitive Biases in Development thumbnail

Your Brain Is Lying to You: Cognitive Biases in Development

Last week

Like Peas in a Pod - What Happens When People Clone Your App? thumbnail

Like Peas in a Pod - What Happens When People Clone Your App?

Ivan Kutskir +2

2 weeks ago

WeAreDevelopers LIVE - Read more, Prompt Less thumbnail

Read more, Prompt Less

Christian Heilmann +2

3 weeks ago

WeAreDevelopers LIVE - Tech Education in Two Languages thumbnail

Tech Education in Two Languages

Daniel Cranney +1

Oct 2026

WeAreDevelopers LIVE - Playing in Production thumbnail

Playing in Production

Andrew MacLean +2

Sep 2026

Upcoming sessions on this topic

Supply Chain Security for the Everyday Engineer

Pradumna Saraf

Kestra Technologies

Quality Assurance Engineer

AI at the Door, Turning ‘Tech Debt Panic’ into ‘Tech Debt Repairs’

Prerit Munjal

Groupon

Senior Technical Product Manager

IAM as a Platform Service

Ramesh Babu K M

Procore

Senior Engineering Manager

Your AI Wrote the Code. Who Vouches for It?

Siddharth Joshi

GitHub

Senior Customer Success Architect

Spec-Driven Development: A Pragmatic Look

Hari Krishnan

Polarizer Technlogies

Founder and CEO

How is SWE & EM roles are changing in the age of AI

Amol Sharma

Stripe

Engineering Manager

Related videos

Software Security 101: Secure Coding Basics thumbnail

Software Security 101: Secure Coding Basics

Thomas Konrad

World Congress · 2021

Secure Code Superstars: Empowering Developers and Surpassing Security Challenges Together thumbnail

Secure Code Superstars: Empowering Developers and Surpassing Security Challenges Together

Stefania Chaplin

World Congress · 2022

Securing Your Web Application Pipeline From Intruders thumbnail

Securing Your Web Application Pipeline From Intruders

Milecia Mcgregor

LIVE · Oct 2020

Security Pitfalls for Software Engineers thumbnail

Security Pitfalls for Software Engineers

Jasmin Azemović · HTEC

World Congress · 2023

Simple Steps to Kill DevSec without Giving Up on Security thumbnail

Simple Steps to Kill DevSec without Giving Up on Security

Isaac Evans · Semgrep

World Congress · 2025

Why Security-First Development Helps You Ship Better Software Faster thumbnail

Why Security-First Development Helps You Ship Better Software Faster

Michael Wildpaner · GitLab

World Congress · 2025

Related articles

BB

Benedikt Bischof

Walking Into The Era of Supply Chain Risks

Welcome to this issue of the WeAreDevelopers Live Talk series. This article recaps an interesting talk by Vandana Verma who introduced the audience interesting topic of supply chain risks.About the...

over 4 years ago

Walking Into The Era of Supply Chain Risks

DC

Daniel Cranney

Understanding and Mitigating Common Web Vulnerabilities

Vulnerabilities exist in many forms on the web, and attackers continue to find creative ways to exploit them. Technological advances like the proliferation of AI are of course exciting nd filled wi...

over 1 year ago

An image with neon lighting featuring a globe and a padlock

DC

Daniel Cranney

Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.

Everyone thinks CISOs make the final call on security tools. But in modern software organisations, adoption starts long before the boardroom, inside CI/CD pipelines, developer workflows, and pull r...

9 months ago

A room full of people at a tech conference

AB

Andre Braun, GitLab

Now is the time for industrialized software development

Now is the time for industrialized software development Recently, I received a letter from my car’s manufacturer alerting me to a recall. They had discovered a defective part and wanted to replace ...

over 1 year ago

A person developint HTML on a laptop with the sun shining on it.

From learning to earning

Jobs that call for the skills explored in this talk.

Staff Developer Advocate, GitHub Security Lab

San Francisco, CA, United States

Experienced $323k Git Github Databases

Product Security Incident Response Analyst

Expert $329k Remote Github Code Review Data Analysis

Senior Software Engineer, Vulnerability Management

Expert $329k Remote Ruby Golang Docker

6 days ago • Verified

Software Development Engineer 1

Bengaluru, India

Starter Remote Java Spring

Senior Incident Response Analyst

Expert $124k Remote Github Code Review Data Analysis

6 days ago • Verified

Software Development Engineer 1

Bengaluru, India

Starter Remote Java