WeAreDevelopers Logo WeAreDevelopers
Sign in
For You LIVE
WeAreDevelopers LIVE • Oct 12, 2020

DevSecOps: Security in DevOps

Aarno Aukia

Integrating security into your CI pipeline transforms final-stage gatekeepers into proactive guardrails. Automate governance to ship secure, compliant code without sacrificing engineering velocity.

Pause
Mute Enter Fullscreen
#1 about 4 min

Evolution from waterfall to agile and DevOps

How software development methodologies shifted from reactive waterfall and agile models to proactive DevOps practices.

#2 about 3 min

Shifting security left using the DevSecOps approach

Why security must be integrated as early non-functional requirements rather than a final gatekeeping step.

#3 about 1 min

Defining application, pipeline, and security operations roles

Breaking down the security journey into application security, pipeline deployment security, and incident response operations.

#4 about 4 min

Core principles for implementing DevSecOps in teams

Essential concepts including team transparency, incremental risk management, supply chain governance, and automated audit trails.

#5 about 3 min

Integrating automated security tooling into build pipelines

How to automate static code analysis, dependency tracking, and container baseline scanning for faster validation.

#6 about 3 min

Eliminating operational errors with containerized application deployments

Using containerization and atomic rollbacks to enforce immutable infrastructure and remove manual production access.

#7 about 4 min

Abstracting infrastructure complexity with container orchestration platforms

Leveraging Kubernetes to handle service discovery and standardize operational abstraction across on-premise and cloud hardware.

#8 about 5 min

Utilizing pre-integrated observability and authentication platform tools

Plugging into the Kubernetes ecosystem to standardize container logging, metrics, TLS certificates, and centralized authentication.

#9 about 6 min

Implementing automated DevSecOps governance in banking software

How Enova uses platform abstraction and business process frameworks to automate deployment approvals under strict regulatory constraints.

#10 about 4 min

Replacing full-stack audits with cloud-native iterative governance

Reducing auditing scopes by validating underlying container platforms once and preventing configuration drift via declarative deployments.

Matching moments

6:32 min

Embracing DevSecOps and automating the software development lifecycle

Mathias Tausig · LIVE

3:15 min

Integrating security and financial disciplines into DevOps models

Holly Cummins · LIVE

1:20 min

Integrating security into the DevOps lifecycle

Reto Kaeser · LIVE

2:57 min

Securing team and management buy-in for DevSecOps adoption

Moataz Nabil Moataz Nabil · LIVE

2:07 min

Integrating security practices for devsecops adoption

Nevelina Aleksandrova · LIVE

2:34 min

Transitioning team culture from standard DevOps to DevSecOps

Moataz Nabil Moataz Nabil · LIVE

More from WeAreDevelopers LIVE

Aliens in Quarantine, Python Deprecates Loops, and AI Buys Old Books - Zbyszek Tenerowicz thumbnail
5:43
5 days ago

Aliens in Quarantine, Python Deprecates Loops, and AI Buys Old Books - Zbyszek Tenerowicz

Chris Heilmann, Daniel Cranney

WeAreDevelopers LIVE - Node and Package Security thumbnail
1:08:30
5 days ago

WeAreDevelopers LIVE - Node and Package Security

Chris Heilmann, Daniel Cranney, Zbyszek Tenerowicz

WeAreDevelopers LIVE - Streaming HTML thumbnail
1:10:26
12 days ago

WeAreDevelopers LIVE - Streaming HTML

Chris Heilmann, Daniel Cranney, Jad Joubran

WeAreDevelopers LIVE - CODE100 at WeAreDevelopers Europe thumbnail
1:02:34
19 days ago

WeAreDevelopers LIVE - CODE100 at WeAreDevelopers Europe

Chris Heilmann, Daniel Cranney, Justin Halsall, Werner Jeschko, Nicole Jeschko, Mirco Tomić

WeAreDevelopers LIVE - Web Performance in an AI World thumbnail
1:07:59
26 days ago

WeAreDevelopers LIVE - Web Performance in an AI World

Chris Heilmann, Daniel Cranney

FIFA Hack, Midjourney Does Ultrasounds, and Trampoline Traffic Lights - Nicole Jeschko and Werner Jeschko thumbnail
5:55
about 2 months ago

FIFA Hack, Midjourney Does Ultrasounds, and Trampoline Traffic Lights - Nicole Jeschko and Werner Jeschko

Chris Heilmann, Daniel Cranney

Upcoming sessions on this topic

Open session

World Congress 2026 North America

Stop Running Mystery Meat in Production

Jeroen van Erp

Technical Advocate @ SUSE

Jeroen van Erp
Open session

World Congress 2026 North America

Don’t kill my Vibes - Simple Steps to Stay Secure when Vibe Coding

Isaac Evans

Co-founder & CEO of Semgrep

Isaac Evans
Open session

World Congress 2026 North America

Secure-by-Inclusion: Preventing Accessibility Barriers from Becoming Security Vulnerabilities

Radostina (Ina) Tsvetkova

Norwegian Directorate of Labour and Welfare (NAV), Senior Advisor in Digital Accessibility and Inclusive Design

Radostina (Ina) Tsvetkova
Open session

World Congress 2026 North America

On the Public Clock: Open-Source Defense When You're Not in the Club

Nicholas Muy

VP Engineering Platform and Security at Scrut.io

Nicholas Muy
Open session

World Congress 2026 North America

Securing AI Agent Infrastructure: Identity, Attestation, and Trust at Scale

Abdel Fane

Founder of OpenA2A

Abdel Fane
Open session

World Congress 2026 North America

Agentic Drift: keeping pace with your agents

John Coghlan

Senior Director, Developer Advocacy at GitLab

John Coghlan

Related videos

DevSecOps culture thumbnail
16:00
WWC 2023 • almost 3 years ago

DevSecOps culture

Ali Yazdani

Demystifying DevOps—Pros, cons, dos & don'ts thumbnail
51:13
LIVE • over 4 years ago

Demystifying DevOps—Pros, cons, dos & don'ts

Thomas Fuchs, Waleed Arshad, Frank Dornberger, Idir Ouhab Meskine

You can’t hack what you can’t see thumbnail
29:34
LIVE • almost 6 years ago

You can’t hack what you can’t see

Reto Kaeser

DevSecOps: Injecting Security into Mobile CI/CD Pipelines thumbnail
45:08
LIVE • almost 5 years ago

DevSecOps: Injecting Security into Mobile CI/CD Pipelines

Moataz Nabil

Securing Your Web Application Pipeline From Intruders thumbnail
44:30
LIVE • almost 6 years ago

Securing Your Web Application Pipeline From Intruders

Milecia Mcgregor

Enabling automated 1-click customer deployments with built-in quality and security thumbnail
44:40
LIVE • over 5 years ago

Enabling automated 1-click customer deployments with built-in quality and security

Christoph Ruggenthaler

Related articles

From learning to earning

Jobs that call for the skills explored in this talk.