WeAreDevelopers Logo WeAreDevelopers
Sign in
For You LIVE
World Congress 2022 • Jun 15, 2022

Secure Code Superstars: Empowering Developers and Surpassing Security Challenges Together

Stefania Chaplin

Relying on a few security champions when developers outnumber them 100-to-1 is a recipe for burnout. Discover how to seamlessly integrate contextual security remediation into your CI/CD workflows.

Pause
Mute Enter Fullscreen
#1 about 3 min

The lifecycle and cost of recurring security bugs

The cycle of discovering, ticketing, and repeatedly fixing the same security vulnerabilities causes developer friction.

#2 about 2 min

Expanding threat awareness beyond top ten lists

Human error and semantic flaws create unique vulnerabilities outside of standard compliance lists.

#3 about 1 min

Addressing developer burnout and context switching

Context switching from changing requirements and repeating bug fixes directly contributes to developer fatigue.

#4 about 3 min

Breaking down silos between developers, security, and ops

Realigning conflicting metrics between departments reduces infrastructural misconfigurations and overall business risk.

#5 about 1 min

Scaling knowledge through security champions programs

Equipping everyday developers with targeted security knowledge bridges the numerical gap between development and security teams.

#6 about 2 min

Leveraging free tools for application security auditing

Utilizing open source applications and dependency checkers builds a more secure baseline before code shifts to production.

#7 about 4 min

Integrating security testing and training in pipelines

Embedding static code analysis and contextual vulnerability training directly into developer commits accelerates remediation.

#8 about 3 min

Balancing workflow efficiency with personal developer wellness

Allocating dedicated time to upskill and addressing technical debt helps maintain both project velocity and mental health.

#9 about 3 min

Prioritizing professional empathy and technical debt reduction

Approaching security gaps as addressable technical debt rather than personal failures fosters better team collaboration.

#10 about 2 min

Transitioning from software development to security roles

Leveraging internal conversations and a strong developer foundation provides a practical pathway into cybersecurity.

#11 about 3 min

Exploring diverse resources for continuous security learning

Engaging with video tutorials, ethical hacking labs, internal hackathons, and local meetups broadens threat awareness.

#12 about 1 min

Exploring offensive security with red team tooling

Using offensive penetration testing platforms helps practical defenders understand how threat actors manipulate systems.

Matching moments

4:58 min

Scaling security teams through developer advocates

Tanya Janca · World Congress 2021

2:30 min

Bridging the gap between developers and security tools

Bozidar Spirovski Bozidar Spirovski +1 · Coffee With Developers

5:25 min

Shifting left and creating internal security champion programs

Vandana Verma Sehgal · LIVE

1:22 min

Addressing the shortage of application security specialists

Joseph Katsioloudes Joseph Katsioloudes · World Congress 2025

1:00 min

Encouraging broader team adoption of security automation practices

Ramona Schwering Ramona Schwering · World Congress 2024

3:58 min

Identifying bottlenecks in traditional software security approaches

Nazneen Rupawalla · World Congress 2022

More from World Congress 2022

What the heck do "declarative" and "reactive" actually mean? thumbnail
30:40
about 4 years ago

What the heck do "declarative" and "reactive" actually mean?

André Kovac

The Design and Evolution of C++ thumbnail
1:01:15
about 4 years ago

The Design and Evolution of C++

Bjarne Stroustrup

But, you're not Facebook thumbnail
31:12
about 4 years ago

But, you're not Facebook

Kristijan Ristovski

Communicate efficiently with Software Architecture Diagrams thumbnail
28:11
about 4 years ago

Communicate efficiently with Software Architecture Diagrams

Simon Lasselsberger

Get Ready for Jakarta EE 10! thumbnail
42:53
about 4 years ago

Get Ready for Jakarta EE 10!

Ivar Grimstad

Keep your code refactorable thumbnail
26:46
about 4 years ago

Keep your code refactorable

Gerrit Stapper

Upcoming sessions on this topic

Open session

World Congress 2026 North America

September 25, 2026 · 15:00–17:00

Stage 12

Secure development from pull request to production with GitHub

Sam Jarvinen

Senior Solutions Engineer, GitHub

Sam Jarvinen
Open session

World Congress 2026 North America

September 25, 2026 · 09:00–09:30

Stage 4

Don’t kill my Vibes - Simple Steps to Stay Secure when Vibe Coding

Isaac Evans

Co-founder & CEO of Semgrep

Isaac Evans
Open session

World Congress 2026 North America

September 25, 2026 · 11:00–11:30

Stage 6

Secure-by-Inclusion: Preventing Accessibility Barriers from Becoming Security Vulnerabilities

Radostina (Ina) Tsvetkova

Norwegian Directorate of Labour and Welfare (NAV), Senior Advisor in Digital Accessibility and Inclusive Design

Radostina (Ina) Tsvetkova
Open session

World Congress 2026 North America

September 23, 2026 · 15:45–17:45

Stage 10

Securing the Agentic Stack: Docker Hardened Images and Supply Chain Security

Ajeet Raina

Developer Advocate, Docker

Ajeet Raina
Open session

World Congress 2026 North America

September 25, 2026 · 13:30–14:00

Stage 9

On the Public Clock: Open-Source Defense When You're Not in the Club

Nicholas Muy

VP Engineering Platform and Security at Scrut.io

Nicholas Muy
Open session

World Congress 2026 North America

September 24, 2026 · 16:00–18:00

Stage 11

Practical Threat Modeling for Software Developers

Mudassir Syed

Lead Security Software Engineer

Mudassir Syed

Related videos

Simple Steps to Kill DevSec without Giving Up on Security thumbnail
21:53
World Congress 2025 • about 1 year ago

Simple Steps to Kill DevSec without Giving Up on Security

Isaac Evans

Why Security-First Development Helps You Ship Better Software Faster thumbnail
22:18
World Congress 2025 • about 1 year ago

Why Security-First Development Helps You Ship Better Software Faster

Michael Wildpaner

Building Security Champions thumbnail
48:02
World Congress 2021 • about 5 years ago

Building Security Champions

Tanya Janca

Security Pitfalls for Software Engineers thumbnail
27:32
World Congress 2023 • almost 3 years ago

Security Pitfalls for Software Engineers

Jasmin Azemović

Software Security 101: Secure Coding Basics thumbnail
1:58:48
World Congress 2021 • about 5 years ago

Software Security 101: Secure Coding Basics

Thomas Konrad

Climate vs. Weather: How Do We Sustainably Make Software More Secure? thumbnail
51:41
LIVE • over 4 years ago

Climate vs. Weather: How Do We Sustainably Make Software More Secure?

Related articles

From learning to earning

Jobs that call for the skills explored in this talk.