World Congress 2023 • Sep 27, 2023

Security Pitfalls for Software Engineers

Jasmin Azemović

Speed without security guarantees catastrophic breaches. Discover why missing input validation remains your application's biggest vulnerability. Learn how to bake DevSecOps directly into your daily workflow.

Starting at 10:26 · Watch from the beginning

Security Pitfalls for Software Engineers thumbnail

Checking access…

Playback and chapters load privately for Free videos.

Matching moments

5:30 min

Identifying non-coding software vulnerabilities and organizational risks

Tino Sokic · World Congress 2023

2:49 min

Integrating fundamental security evaluations into agile development sprints

Bozidar Spirovski

Bozidar Spirovski +1 · Coffee With Developers

2:05 min

Making security a foundational feature in software development

Eileen Uchitelle

Eileen Uchitelle +1 · Coffee With Developers

26:47 min

Exploring pathways to application security careers and research workflows

Vandana Verma Sehgal · LIVE

3:22 min

Transitioning from software engineering to security roles

Anna Oliveira · Coffee With Developers

1:22 min

Discovering security vulnerabilities outside primary application code

Farshad Abasi

Farshad Abasi · World Congress 2026 North America

More from World Congress 2023

The year 3000, a brief history of Web Development thumbnail

The year 3000, a brief history of Web Development

Lorenzo Pieri

Demografie nutzen um jedem Bewerber das passende Angebot zu machen! thumbnail

Demografie nutzen um jedem Bewerber das passende Angebot zu machen!

Nathalie Gierth

Passwordless future: WebAuthn and Passkeys in practice thumbnail

Passwordless future: WebAuthn and Passkeys in practice

Clemens Hübner · inovex

External Secrets Operator: the secrets management toolbox for self-sufficient teams thumbnail

External Secrets Operator: the secrets management toolbox for self-sufficient teams

Moritz Johner

Building Reliable Serverless Applications with AWS CDK and Testing thumbnail

Building Reliable Serverless Applications with AWS CDK and Testing

Fifty Shades of Kubernetes Autoscaling thumbnail

Fifty Shades of Kubernetes Autoscaling

Mario-Leander Reimer

Upcoming sessions on this topic

Supply Chain Security for the Everyday Engineer

Pradumna Saraf

Kestra Technologies

Quality Assurance Engineer

Cloud Sovereignty Is an Architecture Problem: Patterns for Modern Platform Teams

Josephine Eskaline Joyce

IBM India Pvt Ltd

STSM, Chief Architect
Norton Stanley

IBM

Storage Architect

Beware of Strangers Bearing Code: Open Source Trust in the Agent Era

Vikram Vaswani

Consultant

Modernize with Confidence: Secure Legacy Modernization in Action

Prince Kumar

IBM

Software Engineer

A Tale of Two Systems: Design and Reality

Mandeep Singh

Kyndryl

Lead Software Engineer

Your AI Wrote the Code. Who Vouches for It?

Siddharth Joshi

GitHub

Senior Customer Success Architect

Related videos

Software Security 101: Secure Coding Basics thumbnail

Software Security 101: Secure Coding Basics

Thomas Konrad

World Congress · 2021

You can’t hack what you can’t see thumbnail

You can’t hack what you can’t see

Reto Kaeser

LIVE · Oct 2020

Walking into the era of Supply Chain Risks thumbnail

Walking into the era of Supply Chain Risks

Vandana Verma

LIVE · Apr 2022

Secure Code Superstars: Empowering Developers and Surpassing Security Challenges Together thumbnail

Secure Code Superstars: Empowering Developers and Surpassing Security Challenges Together

Stefania Chaplin

World Congress · 2022

Open Source Secure Software Supply Chain in action thumbnail

Open Source Secure Software Supply Chain in action

Natale Vinto · Red Hat

World Congress · 2024

Stranger Danger: Your Java Attack Surface Just Got Bigger thumbnail

Stranger Danger: Your Java Attack Surface Just Got Bigger

Vandana Verma Sehgal

LIVE · Jan 2022

Related articles

BB

Benedikt Bischof

Walking Into The Era of Supply Chain Risks

Welcome to this issue of the WeAreDevelopers Live Talk series. This article recaps an interesting talk by Vandana Verma who introduced the audience interesting topic of supply chain risks.About the...

over 4 years ago

Walking Into The Era of Supply Chain Risks

DC

Daniel Cranney

Understanding and Mitigating Common Web Vulnerabilities

Vulnerabilities exist in many forms on the web, and attackers continue to find creative ways to exploit them. Technological advances like the proliferation of AI are of course exciting nd filled wi...

over 1 year ago

An image with neon lighting featuring a globe and a padlock

DC

Daniel Cranney

Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.

Everyone thinks CISOs make the final call on security tools. But in modern software organisations, adoption starts long before the boardroom, inside CI/CD pipelines, developer workflows, and pull r...

9 months ago

A room full of people at a tech conference

AB

Andre Braun, GitLab

Now is the time for industrialized software development

Now is the time for industrialized software development Recently, I received a letter from my car’s manufacturer alerting me to a recall. They had discovered a defective part and wanted to replace ...

over 1 year ago

A person developint HTML on a laptop with the sun shining on it.

From learning to earning

Jobs that call for the skills explored in this talk.

Product Security Incident Response Analyst

Expert $329k Remote Github Code Review Data Analysis

about 1 month ago

Security Risk & Engineering- Cloud Security

Boston, MA, United States

Expert $99k–232k Multiplatform Data Security Cyber Security

Staff Developer Advocate, GitHub Security Lab

San Francisco, CA, United States

Experienced $323k Git Github Databases

Staff Security Data Engineer

Experienced Remote Github Airflow Terraform

about 2 months ago • Verified

Senior Product Security Architect

Austin, United States

Expert Remote Agentic AI Security Architecture

Senior Software Engineer, Vulnerability Management

Expert $329k Remote Ruby Golang Docker