Back to the SOCless Future
Explore the journey towards a SOCless future in this 32-minute conference talk from BSidesSF 2019. Discover how Twilio's Security Operations team tackled the challenge of implementing effective, scalable, 24/7 monitoring and response without round-the-clock staffing. Gain insights into their methodology and serverless automation framework developed over three years. Learn about the motivations, challenges, and solutions, including the "Magic Box" concept, AWS Thunder Functions, Lambda Functions, Step Functions, and Atlas Core. Understand the technology behind the framework, including state machines, data storage, and human interaction components. Delve into use cases, secret management, and development environments as you uncover innovative approaches to security operations scalability.