How to Shift Left on Security

07/15/24 • 36 min

Max Tykhenko, Security Architect from IBM joins the podcast to talk about:

What are the attack surfaces that most people don't think about enough?
How has the security landscape changed over the last few years in terms of threat detection. How vulnerable are we than how we were 10 years ago?
We all know what shift left generally means, but what does it mean for security? Analyzing this question from a developer and management point of view.

YouTube: https://bit.ly/3Xfv2bp
Apple Podcasts: https://apple.co/4bNrAJK
Spotify Podcasts: https://spoti.fi/4bZjtcA
LinkedIn Group: https://bit.ly/3wZIWDM
RSS Feed: https://bit.ly/3KsaODW
Twitter: https://bit.ly/4ecWHju

Max Tykhenko, Security Architect from IBM joins the podcast to talk about:

What are the attack surfaces that most people don't think about enough?
How has the security landscape changed over the last few years in terms of threat detection. How vulnerable are we than how we were 10 years ago?
We all know what shift left generally means, but what does it mean for security? Analyzing this question from a developer and management point of view.

Previous Episode

Getting into GitOps with Fred Harper, Principal Developer Advocate, kubefirst.io

Frederic Harper, Principal Developer Advocate, from kubefirst.io joins the podcast to dive into GitOps. We discuss:
- What is GitOps?
- How GitOps can help orgs manage their infrastructure
- How to get started
- Secrets management
- Monorepos
You can follow Fred here: https://twitter.com/fharper

Next Episode

Empowered Developers Write Clean Code, Tom Howlett, Head of Product at Sonar

Tom Howlett, Head of Product Management at Sonar is our guest today. Sonar is the leader in helping engineers write clean code through continuous feedback during the development process, and is trusted by millions of developers worldwide.
We talk about:
- The idea of "Start Left" and how it ties into "Shift Left"
- Gen AI in developer workflows and how it promotes TDD
- How does Sonar empower development teams? What's the role of the PM?
- What constitutes a bad test?
- Will static code analysis ever eliminate the need for pen testing?
- How can static code analysis catch bugs across integration boundaries?
- What does a team at Sonar look like?
- Is there a QA or BA role at Sonar?
- What makes Sonar a great place to work