WeAreDevelopers Logo WeAreDevelopers
Sign in
For You LIVE
World Congress 2023 • Oct 23, 2023

DevSecOps culture

Ali Yazdani

Technology alone won’t solve your security problems. Discover how to build a DevSecOps culture that transforms isolated security bottlenecks into true development enablers.

Pause
Mute Enter Fullscreen
#1 about 3 min

Transitioning from late production testing to continuous integrated security

Testing applications exclusively in production causes operational downtime and creates friction between developers and engineers.

#2 about 2 min

Relying on collaborative culture rather than single security tools

Integrating shared responsibilities and team collaboration solves security problems better than just buying new automation software.

#3 about 2 min

Breaking organizational silos to balance delivery speed and stability

Distributing the workload equally across teams ensures faster software delivery without sacrificing application stability.

#4 about 2 min

Revising internal processes to improve transparency and team communication

Creating security champions across different departments prevents teams from secretly bypassing established test pipelines.

#5 about 3 min

Deploying automated security analysis tools directly into application pipelines

Integrating software component analysis and secret scanning prevents expensive credential leaks in public repositories.

#6 about 2 min

Using visualization and policy code to govern pipeline execution

Monitoring scan logs visually helps managers identify and address developers who skip essential run-time analysis.

#7 about 3 min

Overcoming cultural resistance to achieve international security compliance standards

Combining cross-functional communication with seamless tooling integration allows small teams to secure major regulatory certifications.

#8 about 2 min

Evaluating security culture transformation as a long-term resource investment

Catching software vulnerabilities earlier in the development cycle aggressively reduces the total cost of remediation.

#9 about 2 min

Moving security scanning into local environments via pre-commit conditions

Running automated tests locally before code is merged completely eliminates the accidental publishing of system secrets.

Matching moments

2:57 min

Securing team and management buy-in for DevSecOps adoption

Moataz Nabil Moataz Nabil · LIVE

2:34 min

Transitioning team culture from standard DevOps to DevSecOps

Moataz Nabil Moataz Nabil · LIVE

6:32 min

Embracing DevSecOps and automating the software development lifecycle

Mathias Tausig · LIVE

2:09 min

Shifting security left using the DevSecOps approach

Aarno Aukia · LIVE

4:00 min

Core principles for implementing DevSecOps in teams

Aarno Aukia · LIVE

17:55 min

Overcoming cultural friction and scaling DevOps team practices

Jacob Duijzer · LIVE

More from World Congress 2023

The year 3000, a brief history of Web Development thumbnail
25:30
over 2 years ago

The year 3000, a brief history of Web Development

Lorenzo Pieri

Demografie nutzen um jedem Bewerber das passende Angebot zu machen! thumbnail
8:52
over 2 years ago

Demografie nutzen um jedem Bewerber das passende Angebot zu machen!

Nathalie Gierth

Guided Memory Management: Rust's Ownership Model thumbnail
0:18
almost 3 years ago

Guided Memory Management: Rust's Ownership Model

Stefan Baumgartner

Passwordless future: WebAuthn and Passkeys in practice thumbnail
32:32
almost 3 years ago

Passwordless future: WebAuthn and Passkeys in practice

Clemens Hübner

External Secrets Operator: the secrets management toolbox for self-sufficient teams thumbnail
30:07
almost 3 years ago

External Secrets Operator: the secrets management toolbox for self-sufficient teams

Moritz Johner

Building Reliable Serverless Applications with AWS CDK and Testing thumbnail
25:18
almost 3 years ago

Building Reliable Serverless Applications with AWS CDK and Testing

Raphael Manke

Upcoming sessions on this topic

Open session

World Congress 2026 North America

September 25, 2026 · 15:00–17:00

Stage 12

Secure development from pull request to production with GitHub

Sam Jarvinen

Senior Solutions Engineer, GitHub

Sam Jarvinen
Open session

World Congress 2026 North America

September 23, 2026 · 15:45–17:45

Stage 10

Securing the Agentic Stack: Docker Hardened Images and Supply Chain Security

Ajeet Raina

Developer Advocate, Docker

Ajeet Raina
Open session

World Congress 2026 North America

September 25, 2026 · 09:00–09:30

Stage 4

Don’t kill my Vibes - Simple Steps to Stay Secure when Vibe Coding

Isaac Evans

Co-founder & CEO of Semgrep

Isaac Evans
Open session

World Congress 2026 North America

September 25, 2026 · 13:30–14:00

Stage 9

On the Public Clock: Open-Source Defense When You're Not in the Club

Nicholas Muy

VP Engineering Platform and Security at Scrut.io

Nicholas Muy
Open session

World Congress 2026 North America

September 25, 2026 · 11:40–12:10

Stage 3

Culture Doesn't Scale Itself: Leading Engineering Teams Through Hypergrowth and the AI Transition

Thanos Baskous

VP of Engineering and Co-founder of Cogent Security

Thanos Baskous
Open session

World Congress 2026 North America

September 23, 2026 · 14:00–14:30

Stage 1

Supply Chain Security When Agents Write the Code

Ajeet Raina

Developer Advocate, Docker

Ajeet Raina

Related videos

DevSecOps: Security in DevOps thumbnail
33:20
LIVE • almost 6 years ago

DevSecOps: Security in DevOps

Aarno Aukia

Demystifying DevOps—Pros, cons, dos & don'ts thumbnail
51:13
LIVE • almost 5 years ago

Demystifying DevOps—Pros, cons, dos & don'ts

Thomas Fuchs, Waleed Arshad, Frank Dornberger, Idir Ouhab Meskine

Organizational Change Through The Power Of Why - DevSecOps Enablement thumbnail
26:50
World Congress 2022 • about 4 years ago

Organizational Change Through The Power Of Why - DevSecOps Enablement

Nazneen Rupawalla

You can’t hack what you can’t see thumbnail
29:34
LIVE • almost 6 years ago

You can’t hack what you can’t see

Reto Kaeser

Securing Your Web Application Pipeline From Intruders thumbnail
44:30
LIVE • almost 6 years ago

Securing Your Web Application Pipeline From Intruders

Milecia Mcgregor

DevSecOps: Injecting Security into Mobile CI/CD Pipelines thumbnail
45:08
LIVE • almost 5 years ago

DevSecOps: Injecting Security into Mobile CI/CD Pipelines

Moataz Nabil

Related articles

From learning to earning

Jobs that call for the skills explored in this talk.