Overcoming the DevSecOps Imposter Syndrome
summary
Claims a practical road map: runs the largest DevSecOps London meetup, passed a 24‑hour OSCP exam, and built an eight‑part self training course to fill gaps. Emphasizes DSA modeling (threat + delivery mapping), uses value‑stream mapping, pushes static analysis and software composition analysis inline in CI, treats dynamic analysis out of band, and favors policy‑driven, consistent measurements across pipelines. Mentions CNCF tool categories, cloud choices, and a virtual meetup platform used to simulate networking.
AI-written summary · about
chapters (11)
- 0:00Introduction and imposter syndrome
- 1:26Security timeline and evolution
- 6:07DevSecOps process breakdown
- 8:13Value stream mapping in software
- 12:35DevOps principles and CIA
- 15:03Career growth areas in DevSecOps
- 18:56Tools and testing approaches
- 23:33Inline vs out-of-band testing
- 24:14Structuring personal DevSecOps knowledge
- 27:28Learning from communities and books
- 29:16Q&A on automation and testing
related talks
30mDevSecOps: More Than Just Pipelines
30mSecuring DevOps using OWASP DevSecOps Tools
32mDevSecOps is Dead, Long Live DevSecOps
01h 55mDevSecOps from Zero to Hero!
42mFrom Devops to DevSecOps
30mDevSecOps State of the Union
31mDevSecOps, or How to Integrate Security into DevOps Practices
45mDevSecOps : add Security to your DevOps!