WeAreDevelopers Logo WeAreDevelopers
Sign in
For You LIVE
World Congress 2023 • Oct 23, 2023

DevSecOps culture

Ali Yazdani

Technology alone won’t solve your security problems. Discover how to build a DevSecOps culture that transforms isolated security bottlenecks into true development enablers.

Pause
Mute Enter Fullscreen
#1 about 3 min

Transitioning from late production testing to continuous integrated security

Testing applications exclusively in production causes operational downtime and creates friction between developers and engineers.

#2 about 2 min

Relying on collaborative culture rather than single security tools

Integrating shared responsibilities and team collaboration solves security problems better than just buying new automation software.

#3 about 2 min

Breaking organizational silos to balance delivery speed and stability

Distributing the workload equally across teams ensures faster software delivery without sacrificing application stability.

#4 about 2 min

Revising internal processes to improve transparency and team communication

Creating security champions across different departments prevents teams from secretly bypassing established test pipelines.

#5 about 3 min

Deploying automated security analysis tools directly into application pipelines

Integrating software component analysis and secret scanning prevents expensive credential leaks in public repositories.

#6 about 2 min

Using visualization and policy code to govern pipeline execution

Monitoring scan logs visually helps managers identify and address developers who skip essential run-time analysis.

#7 about 3 min

Overcoming cultural resistance to achieve international security compliance standards

Combining cross-functional communication with seamless tooling integration allows small teams to secure major regulatory certifications.

#8 about 2 min

Evaluating security culture transformation as a long-term resource investment

Catching software vulnerabilities earlier in the development cycle aggressively reduces the total cost of remediation.

#9 about 2 min

Moving security scanning into local environments via pre-commit conditions

Running automated tests locally before code is merged completely eliminates the accidental publishing of system secrets.

Matching moments

2:57 min

Securing team and management buy-in for DevSecOps adoption

Moataz Nabil Moataz Nabil · LIVE

2:34 min

Transitioning team culture from standard DevOps to DevSecOps

Moataz Nabil Moataz Nabil · LIVE

6:32 min

Embracing DevSecOps and automating the software development lifecycle

Mathias Tausig · LIVE

2:09 min

Shifting security left using the DevSecOps approach

Aarno Aukia · LIVE

4:00 min

Core principles for implementing DevSecOps in teams

Aarno Aukia · LIVE

17:55 min

Overcoming cultural friction and scaling DevOps team practices

Jacob Duijzer · LIVE

More from World Congress 2023

The year 3000, a brief history of Web Development thumbnail
25:30
over 2 years ago

The year 3000, a brief history of Web Development

Lorenzo Pieri

Demografie nutzen um jedem Bewerber das passende Angebot zu machen! thumbnail
8:52
over 2 years ago

Demografie nutzen um jedem Bewerber das passende Angebot zu machen!

Nathalie Gierth

Guided Memory Management: Rust's Ownership Model thumbnail
0:18
over 2 years ago

Guided Memory Management: Rust's Ownership Model

Stefan Baumgartner

Passwordless future: WebAuthn and Passkeys in practice thumbnail
32:32
over 2 years ago

Passwordless future: WebAuthn and Passkeys in practice

Clemens Hübner

External Secrets Operator: the secrets management toolbox for self-sufficient teams thumbnail
30:07
over 2 years ago

External Secrets Operator: the secrets management toolbox for self-sufficient teams

Moritz Johner

Building Reliable Serverless Applications with AWS CDK and Testing thumbnail
25:18
over 2 years ago

Building Reliable Serverless Applications with AWS CDK and Testing

Raphael Manke

Upcoming sessions on this topic

Open session

World Congress 2026 North America

Don’t kill my Vibes - Simple Steps to Stay Secure when Vibe Coding

Isaac Evans

Co-founder & CEO of Semgrep

Isaac Evans
Open session

World Congress 2026 North America

On the Public Clock: Open-Source Defense When You're Not in the Club

Nicholas Muy

VP Engineering Platform and Security at Scrut.io

Nicholas Muy
Open session

World Congress 2026 North America

Culture Doesn't Scale Itself: Leading Engineering Teams Through Hypergrowth and the AI Transition

Thanos Baskous

VP of Engineering and Co-founder of Cogent Security

Thanos Baskous
Open session

World Congress 2026 North America

Stop Running Mystery Meat in Production

Jeroen van Erp

Technical Advocate @ SUSE

Jeroen van Erp
Open session

World Congress 2026 North America

Secure-by-Inclusion: Preventing Accessibility Barriers from Becoming Security Vulnerabilities

Radostina (Ina) Tsvetkova

Norwegian Directorate of Labour and Welfare (NAV), Senior Advisor in Digital Accessibility and Inclusive Design

Radostina (Ina) Tsvetkova
Open session

World Congress 2026 North America

Agentic Drift: keeping pace with your agents

John Coghlan

Senior Director, Developer Advocacy at GitLab

John Coghlan

Related videos

DevSecOps: Security in DevOps thumbnail
33:20
LIVE • almost 6 years ago

DevSecOps: Security in DevOps

Aarno Aukia

Demystifying DevOps—Pros, cons, dos & don'ts thumbnail
51:13
LIVE • over 4 years ago

Demystifying DevOps—Pros, cons, dos & don'ts

Thomas Fuchs, Waleed Arshad, Frank Dornberger, Idir Ouhab Meskine

Organizational Change Through The Power Of Why - DevSecOps Enablement thumbnail
26:50
WWC 2022 • about 4 years ago

Organizational Change Through The Power Of Why - DevSecOps Enablement

Nazneen Rupawalla

You can’t hack what you can’t see thumbnail
29:34
LIVE • almost 6 years ago

You can’t hack what you can’t see

Reto Kaeser

Securing Your Web Application Pipeline From Intruders thumbnail
44:30
LIVE • almost 6 years ago

Securing Your Web Application Pipeline From Intruders

Milecia Mcgregor

DevSecOps: Injecting Security into Mobile CI/CD Pipelines thumbnail
45:08
LIVE • almost 5 years ago

DevSecOps: Injecting Security into Mobile CI/CD Pipelines

Moataz Nabil

Related articles

From learning to earning

Jobs that call for the skills explored in this talk.