World Congress 2023 • Sep 27, 2023

Security Pitfalls for Software Engineers

Jasmin Azemović

Speed without security guarantees catastrophic breaches. Discover why missing input validation remains your application's biggest vulnerability. Learn how to bake DevSecOps directly into your daily workflow.

Security Pitfalls for Software Engineers thumbnail

Checking access…

Playback and chapters load privately for Free videos.

Matching moments

5:30 min

Identifying non-coding software vulnerabilities and organizational risks

Tino Sokic · World Congress 2023

2:49 min

Integrating fundamental security evaluations into agile development sprints

Bozidar Spirovski +1 · Coffee With Developers

2:05 min

Making security a foundational feature in software development

Eileen Uchitelle +1 · Coffee With Developers

26:47 min

Exploring pathways to application security careers and research workflows

Vandana Verma Sehgal · LIVE

3:22 min

Transitioning from software engineering to security roles

Anna Oliveira · Coffee With Developers

1:22 min

Discovering security vulnerabilities outside primary application code

Farshad Abasi

Farshad Abasi · World Congress 2026 North America

More from World Congress 2023

The year 3000, a brief history of Web Development thumbnail

The year 3000, a brief history of Web Development

Lorenzo Pieri

Demografie nutzen um jedem Bewerber das passende Angebot zu machen! thumbnail

Demografie nutzen um jedem Bewerber das passende Angebot zu machen!

Nathalie Gierth

Passwordless future: WebAuthn and Passkeys in practice thumbnail

Passwordless future: WebAuthn and Passkeys in practice

Clemens Hübner · inovex

External Secrets Operator: the secrets management toolbox for self-sufficient teams thumbnail

External Secrets Operator: the secrets management toolbox for self-sufficient teams

Moritz Johner

Building Reliable Serverless Applications with AWS CDK and Testing thumbnail

Building Reliable Serverless Applications with AWS CDK and Testing

Fifty Shades of Kubernetes Autoscaling thumbnail

Fifty Shades of Kubernetes Autoscaling

Mario-Leander Reimer

Upcoming sessions on this topic

Starts in 12 days

Conference India 2026

November 25–26, 2026

Bengaluru, India

Get tickets All 107 sessions

Supply Chain Security for the Everyday Engineer
Pradumna Saraf · Kestra Technologies

Wed 25 Nov · Stage 3 - powered by GitHub
Cloud Sovereignty Is an Architecture Problem: Patterns for Modern Platform Teams
Josephine Eskaline Joyce & Norton Stanley

Thu 26 Nov · Stage 1 - powered by IBM
Beware of Strangers Bearing Code: Open Source Trust in the Agent Era
Vikram Vaswani

Wed 25 Nov · Stage 3 - powered by GitHub

Related videos

Software Security 101: Secure Coding Basics thumbnail

Software Security 101: Secure Coding Basics

Thomas Konrad

World Congress · 2021

You can’t hack what you can’t see thumbnail

You can’t hack what you can’t see

Reto Kaeser

LIVE · Oct 2020

Walking into the era of Supply Chain Risks thumbnail

Walking into the era of Supply Chain Risks

Vandana Verma

LIVE · Apr 2022

Secure Code Superstars: Empowering Developers and Surpassing Security Challenges Together thumbnail

Secure Code Superstars: Empowering Developers and Surpassing Security Challenges Together

Stefania Chaplin

World Congress · 2022

Open Source Secure Software Supply Chain in action thumbnail

Open Source Secure Software Supply Chain in action

Natale Vinto · Red Hat

World Congress · 2024

Stranger Danger: Your Java Attack Surface Just Got Bigger thumbnail

Stranger Danger: Your Java Attack Surface Just Got Bigger

Vandana Verma Sehgal

LIVE · Jan 2022

Related articles

BB

Benedikt Bischof

Walking Into The Era of Supply Chain Risks

Welcome to this issue of the WeAreDevelopers Live Talk series. This article recaps an interesting talk by Vandana Verma who introduced the audience interesting topic of supply chain risks.About the...

over 4 years ago

Walking Into The Era of Supply Chain Risks

DC

Daniel Cranney

Understanding and Mitigating Common Web Vulnerabilities

Vulnerabilities exist in many forms on the web, and attackers continue to find creative ways to exploit them. Technological advances like the proliferation of AI are of course exciting nd filled wi...

over 1 year ago

An image with neon lighting featuring a globe and a padlock

DC

Daniel Cranney

Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.

Everyone thinks CISOs make the final call on security tools. But in modern software organisations, adoption starts long before the boardroom, inside CI/CD pipelines, developer workflows, and pull r...

9 months ago

A room full of people at a tech conference

AB

Andre Braun, GitLab

Now is the time for industrialized software development

Now is the time for industrialized software development Recently, I received a letter from my car’s manufacturer alerting me to a recall. They had discovered a defective part and wanted to replace ...

over 1 year ago

A person developint HTML on a laptop with the sun shining on it.

From learning to earning

Jobs that call for the skills explored in this talk.

Product Security Incident Response Analyst

Expert $329k Remote Github Code Review Data Analysis

Staff Developer Advocate, GitHub Security Lab

San Francisco, CA, United States

Experienced $323k Git Github Databases

Staff Security Data Engineer

Experienced Remote Github Airflow Terraform

about 2 months ago •

Senior Product Security Architect

Austin, United States

Expert Hybrid · 3 days on-site Agentic AI Security Architecture

Senior Software Engineer, Vulnerability Management

Expert $329k Remote Ruby Golang Docker

Cyber Defense Specialist

Raiffeisen Bank International AG

€47k Mitre Att&ck Cyber Warfare Cyber Security