• Infosec In the City (IIC)

SINCON 2021 Conference — Continuous Security — by Vandana Verma & DeveloperSteve Coochin

Updated: Nov 2

SINCON 2021 Conference — Fix-It Talk

Day 1 (05 Nov 2021) 12.00pm—12.45pm @ Main Stage

Continuous Security — Building Security Into Your Pipelines

Abstract

In the world of continuous delivery and cloud-native, the boundaries between what is our application and what constitutes infrastructure are becoming increasingly blurred. Our workloads, the containers they ship in, and our platform configuration is now often developed and deployed by the same teams, and development velocity is the key metric to success. This presents us with a challenge that the previous models of security as a final external gatekeeper step cannot keep up with. To ensure our apps and platforms are secure, we need to integrate security at all stages of our pipelines and ensure that our developers and engineering teams have tools and data which enable them to make decisions about security on an ongoing basis.


About Vandana Verma & DeveloperSteve Coochin

VANDANA VERMA is a Security Relations leader at Snyk with a current focus on DevSecOps. In her previous experience, she has dealt with application security, Vulnerability management, SOC, infrastructure security and cloud security.


She is a seasoned speaker / Trainer and presented at various public events ranging from Global OWASP AppSec events to BlackHat events to regional events like BSides events in India. She is part of the OWASP Global board of directors (Vice-Chair). She also works in various communities towards diversity initiatives InfosecGirls, InfosecKids and WoSec.


Vandana is a member of the Black Hat Asia Review Board as well as multiple other conferences including Grace Hopper India, OWASP AppSec USA to name a few. She is also one of the organisers of BSides Delhi.


She has been the recipient of multiple prestigious awards like Resilient CISO award by Dynamic CISO, Cyber Security Woman of the Year Award 2020 by Cyber Sec Awards, Application Security Influencer 2020 by Whitesource to name a few.


DEVELOPERSTEVE COOCHIN comes from a strong background as a developer, with over 20 years of industry experience he has worked with companies, startups and not-for-profits of all sizes.


DeveloperSteve has worked closely with developer communities as a Tech Evangelist and Advocate to develop and nurture the healthy developer and start-up culture that continues to flourish. With a passion for sharing knowledge, DeveloperSteve is an established international speaker and loves geeking out with people everywhere.


As a Tech Evangelist and Advocate, he has represented and worked with global companies such as IBM, PayPal, Braintree, Xero, Telstra, Nginx, Gitlab and more.

59 views0 comments