WeAreDevelopers Logo WeAreDevelopers
Sign in
For You LIVE
WeAreDevelopers LIVE • Oct 12, 2020

DevSecOps: Security in DevOps

Aarno Aukia

Integrating security into your CI pipeline transforms final-stage gatekeepers into proactive guardrails. Automate governance to ship secure, compliant code without sacrificing engineering velocity.

Pause
Mute Enter Fullscreen
#1 about 4 min

Evolution from waterfall to agile and DevOps

How software development methodologies shifted from reactive waterfall and agile models to proactive DevOps practices.

#2 about 3 min

Shifting security left using the DevSecOps approach

Why security must be integrated as early non-functional requirements rather than a final gatekeeping step.

#3 about 1 min

Defining application, pipeline, and security operations roles

Breaking down the security journey into application security, pipeline deployment security, and incident response operations.

#4 about 4 min

Core principles for implementing DevSecOps in teams

Essential concepts including team transparency, incremental risk management, supply chain governance, and automated audit trails.

#5 about 3 min

Integrating automated security tooling into build pipelines

How to automate static code analysis, dependency tracking, and container baseline scanning for faster validation.

#6 about 3 min

Eliminating operational errors with containerized application deployments

Using containerization and atomic rollbacks to enforce immutable infrastructure and remove manual production access.

#7 about 4 min

Abstracting infrastructure complexity with container orchestration platforms

Leveraging Kubernetes to handle service discovery and standardize operational abstraction across on-premise and cloud hardware.

#8 about 5 min

Utilizing pre-integrated observability and authentication platform tools

Plugging into the Kubernetes ecosystem to standardize container logging, metrics, TLS certificates, and centralized authentication.

#9 about 6 min

Implementing automated DevSecOps governance in banking software

How Enova uses platform abstraction and business process frameworks to automate deployment approvals under strict regulatory constraints.

#10 about 4 min

Replacing full-stack audits with cloud-native iterative governance

Reducing auditing scopes by validating underlying container platforms once and preventing configuration drift via declarative deployments.

Matching moments

6:32 min

Embracing DevSecOps and automating the software development lifecycle

Mathias Tausig · LIVE

3:15 min

Integrating security and financial disciplines into DevOps models

Holly Cummins · LIVE

1:20 min

Integrating security into the DevOps lifecycle

Reto Kaeser · LIVE

2:57 min

Securing team and management buy-in for DevSecOps adoption

Moataz Nabil Moataz Nabil · LIVE

2:07 min

Integrating security practices for devsecops adoption

Nevelina Aleksandrova · LIVE

2:34 min

Transitioning team culture from standard DevOps to DevSecOps

Moataz Nabil Moataz Nabil · LIVE

More from WeAreDevelopers LIVE

WeAreDevelopers LIVE - Read more, Prompt Less thumbnail
1:01:30
2 days ago

WeAreDevelopers LIVE - Read more, Prompt Less

Chris Heilmann, Daniel Cranney, Luise Freese

WeAreDevelopers LIVE - Tech Education in Two Languages thumbnail
1:00:18
9 days ago

WeAreDevelopers LIVE - Tech Education in Two Languages

Daniel Cranney, Roxy Rodriguez-Becker

WeAreDevelopers LIVE - Playing in Production thumbnail
1:06:40
16 days ago

WeAreDevelopers LIVE - Playing in Production

Andrew MacLean, Daniel Cranney, Christian Heilmann

WeAreDevelopers LIVE - Is CSS Catching Up to Flash? thumbnail
1:03:33
about 1 month ago

WeAreDevelopers LIVE - Is CSS Catching Up to Flash?

Chris Heilmann, Daniel Cranney, Bramus Van Damme

WeAreDevelopers LIVE - Project Chopin: Make Your Team and Agents Play Along thumbnail
1:21:17
about 1 month ago

WeAreDevelopers LIVE - Project Chopin: Make Your Team and Agents Play Along

Chris Heilmann, Daniel Cranney, Krzysztof Cieślak

Fake or News - AI Toothbrushes, Carrier Pigeon Tech & Life on Mars - Krzysztof Cieślak thumbnail
4:23
about 1 month ago

Fake or News - AI Toothbrushes, Carrier Pigeon Tech & Life on Mars - Krzysztof Cieślak

Chris Heilmann, Daniel Cranney

Upcoming sessions on this topic

Open session

Supply Chain Security for the Everyday Engineer

  • Pradumna Saraf

    Kestra Technologies

    Quality Assurance Engineer

Open session

Beware of Strangers Bearing Code: Open Source Trust in the Agent Era

  • Vikram Vaswani

    Consultant

Open session

Speed or Security? Why Not Both for Your Coding Agents

  • Ajeet Raina

    Docker

    Developer Advocate

Open session

How is SWE & EM roles are changing in the age of AI

  • Amol Sharma

    Stripe

    Engineering Manager

Open session

We Deleted Our Observability Stack and Rebuilt It with OTEL: 12 Engineers to 4 at 20K+ clusters

  • Yash Sharma

    DigitalOcean

    Developer Advocate

Open session

AI Is the Easy Part: Why Faster Engineers Don't Make Faster Businesses

  • Bharat Sharma

    Booking

    Senior Engineering Manager

Related videos

DevSecOps culture thumbnail
16:00
World Congress 2023 • almost 3 years ago

DevSecOps culture

Ali Yazdani

Demystifying DevOps—Pros, cons, dos & don'ts thumbnail
51:13
LIVE • almost 5 years ago

Demystifying DevOps—Pros, cons, dos & don'ts

Thomas Fuchs, Waleed Arshad, Frank Dornberger, Idir Ouhab Meskine

You can’t hack what you can’t see thumbnail
29:34
LIVE • about 6 years ago

You can’t hack what you can’t see

Reto Kaeser

DevSecOps: Injecting Security into Mobile CI/CD Pipelines thumbnail
45:08
LIVE • almost 5 years ago

DevSecOps: Injecting Security into Mobile CI/CD Pipelines

Moataz Nabil

Securing Your Web Application Pipeline From Intruders thumbnail
44:30
LIVE • about 6 years ago

Securing Your Web Application Pipeline From Intruders

Milecia Mcgregor

Enabling automated 1-click customer deployments with built-in quality and security thumbnail
44:40
LIVE • almost 6 years ago

Enabling automated 1-click customer deployments with built-in quality and security

Christoph Ruggenthaler

Related articles

From learning to earning

Jobs that call for the skills explored in this talk.