CISSP
Comprehensive cybersecurity training covering risk management, asset security, engineering, networking, access management, and secure development. Prepares for CISSP certification and career advancement.
Immutable's Smart Contract Secure Development Process - From Concept to Deployment
Discover the comprehensive security development lifecycle for smart contracts, from initial concept through deployment and incident response, based on Immutable's proven methodologies.
DevSecOps Industry Lessons Learned and Future Steps with AI Integration
Gain insights into DevSecOps evolution, AI challenges, and practical steps for organizational maturity while exploring industry-proven lessons and future perspectives for effective implementation.
2FAC: Facebook's Internal Multi-factor Authentication Platform
Explore Facebook's internal multi-factor authentication platform, its design challenges, and innovative solutions for enhanced security in large-scale environments.
How DevOps Becomes DevOpsSec - Chris Raethke, Bugcrowd Webinar
Explore how DevOps evolves into DevOpsSec, integrating security into development processes. Learn strategies for effective implementation and team collaboration.
Shifting Engineering Right - Security Engineers Learning from DevSecOps
Explore how security engineers can enhance their skills by adopting DevSecOps principles, focusing on collaborative feature development and bidirectional knowledge transfer between teams.
A DevSecOps Tale of Business, Engineering, and People
Explore DevSecOps through a historical lens, examining its impact on business, engineering, and resilience. Learn from past challenges to build high-performing teams and implement effective DevSecOps strategies.
ReproNow - Saving Time in Reproducing and Triaging Security Bugs
Introducing ReproNow: an open-source tool for efficiently reproducing and triaging security vulnerabilities. This chrome/firefox extension captures researcher's walkthrough, including network requests, streamlining bug validation for security engineers.
Lessons in Securing Internal Apps - AppSecCali 2019
Lessons and strategies for securing internal applications, including authentication, TLS, Content Security Policy, and leveraging WAFs. Insights on scalable approaches and using internal apps to train security engineers.
What Is a DevSecOps Engineer? - Roles, Skills, and Responsibilities
Explore the role of a DevSecOps Engineer, including skills, responsibilities, and career evolution for security professionals interested in integrating security into DevOps practices.
Security Selfie: Sizing Up Your AppSec Program with New Metrics
Discover innovative metrics to evaluate and enhance your application security program's effectiveness, presented by Facebook's Security Engineering Manager.
Scaling Security in Leading Companies - DevOps and CI/CD Best Practices
Discover pro-tips and actionable lessons from mature security teams on scaling security in modern software development. Learn effective strategies for buy-in, engineering projects, analysis integration, and production monitoring.
Building Your Own Large Scale Web Security Scanning Infrastructure
Learn to build, scale, and integrate a robust web security scanning infrastructure into your continuous delivery pipeline, with insights on customization and comparisons to existing solutions.
An SDLC for the DevSecOps Era
Explore an SDLC tailored for the DevSecOps era with insights on integrating security into modern development practices and organizational culture.
Building a Modern Security Engineering Organization
Practical insights on building modern AppSec and NetSec programs, launching bug bounties, and conducting realistic attack simulations in the era of continuous deployment and DevOps.
Thinking Differently About Security - What Could Possibly Go Wrong?
Explore innovative security perspectives, blending technical expertise with insights from economics and military history to effectively communicate and address cybersecurity challenges.
Change is Hard - Securing the Future Today
Explore the socio-technical challenges of implementing modern security practices, blending research and anecdotes to address resistance to change and holistic problem-solving approaches.
Using Argo Project to Secure Elastic - InfoSec Team's Journey
Discover how Elastic's InfoSec team leverages Argo Project tools for efficient K8s cluster management, GitOps-driven workflows, and seamless deployment of security use-cases in cloud environments.
Loom Security Journey - Getting Over the Finish Line
Explore the security journey of a startup, from building essential functions to navigating a smooth acquisition. Gain insights into critical security measures during rapid growth and M&A processes.
The Road to Developers' Hearts - Bridging the Gap Between Security and Software Engineering
Insights on bridging the gap between security professionals and software engineers, based on experience building security software at scale.
Insecurity Protocols - An Overview of Modern Authentication
Explore modern authentication protocols like OpenID Connect, SAML, and WebAuthn. Learn their strengths, vulnerabilities, and real-world security implications in this comprehensive overview.