Practical DevSecOps podcast

Player FM - Internet Radio Done Right

اضافه شده در two هفته پیش

محتوای ارائه شده توسط Varun Kumar. تمام محتوای پادکست شامل قسمت‌ها، گرافیک‌ها و توضیحات پادکست مستقیماً توسط Varun Kumar یا شریک پلتفرم پادکست آن‌ها آپلود و ارائه می‌شوند. اگر فکر می‌کنید شخصی بدون اجازه شما از اثر دارای حق نسخه‌برداری شما استفاده می‌کند، می‌توانید روندی که در اینجا شرح داده شده است را دنبال کنید.https://fa.player.fm/legal

All About Change

1
Gary Sinise: Doing More for Our veterans with the Gary Sinise Foundation 27:29

15 روز پیش27:29

پخش در آینده

لیست ها

پسندیدن

دوست داشته شد

27:29

Gary Sinise is an award winning actor, on the stage, TV and big screen. He is best known for playing Lieutenant Dan in Forrest Gump. Inspired by this role and his family members, Gary is now the head of the Gary Sinise Foundation, which offers support for service members who need help with mental wellness, trauma, physical recovery, and loss. He Also plays concerts worldwide for our nation’s defenders and their families, boosting morale and offering gratitude for their sacrifices as part of the Lt. Dan Band. Jay and Gary discuss the changing needs of American service members and their families, the many services the Gary Sinise Foundation provides, how Gary’s work helped him through personal loss and much more. Today's episode was produced by Tani Levitt and Mijon Zulu. To check out more episodes or to learn more about the show, you can visit our website Allaboutchangepodcast.com. If you like our show, spread the word, tell a friend or family member, or leave us a review on your favorite podcasting app. We really appreciate it. All About Change is produced by the Ruderman Family Foundation. Episode Chapters (0:00) intro (1:11) Veterans’ changing needs over the past half century (7:57) Veterans’ appreciation of Gary’s portrayal of Lt. Dan (10:25) By helping others, we step out of ourselves (11:46) The Lt. Dan Band (15:29) How the death of Gary’s son Mac impacts his activism (17:33) Bringing services to American heroes wherever they are (19:45) Accurate portrayals of veterans in film and TV (20:58) How can people get involved with the Gary Sinise foundation (24:24) Goodbye For video episodes, watch on www.youtube.com/@therudermanfamilyfoundation Stay in touch: X: @JayRuderman | @RudermanFdn LinkedIn: Jay Ruderman | Ruderman Family Foundation Instagram: All About Change Podcast | Ruderman Family Foundation To learn more about the podcast, visit https://allaboutchangepodcast.com/ Looking for more insights into the world of activism? Be sure to check out Jay’s brand new book, Find Your Fight , in which Jay teaches the next generation of activists and advocates how to step up and bring about lasting change. You can find Find Your Fight wherever you buy your books, and you can learn more about it at ⁠⁠www.jayruderman.com⁠⁠ .…

Practical DevSecOps

اشتراک گذاری

خانه سری•Feed

Practical DevSecOps (a Hysn Technologies Inc. company) offers vendor-neutral and hands-on DevSecOps and Product Security training and certification programs for IT Professionals. Our online training and certifications are focused on modern areas of information security, including DevOps Security, AI Security, Cloud-Native Security, API Security, Container Security, Threat Modeling, and more.

4 قسمت

#Higher Education #Podcasting Education #Varun Kumar #DevSecOps #Cloud Security #Application Security #Container Security #Api Security #Ci/cd Security #Devops Automation #Cybersecurity #Cloud Native #Product Security #Threat Modeling #Ai Security

Practical DevSecOps

updated ۸ روز پیش

اشتراک گذاری

خانه سری•Feed

4 قسمت

All episodes

Practical DevSecOps

1
Global Banks Slash Security Costs 5X with Threat Model Training 11:42

۸ روز پیش11:42

11:42

Discover how a global financial institution transformed its security posture and achieved massive cost savings through targeted threat modeling training. Facing challenges like inconsistent practices, difficulty scaling training across 50 countries , and keeping pace with evolving threats, this bank needed a new approach beyond infrequent, in-person workshops. Their solution? Leveraging the Certified Threat Modeling Professional (CTMP) course from Practical DevSecOps . This program offered a practical learning approach with extensive hands-on labs simulating real banking scenarios and crucial 24/7 expert support via Mattermost. It covered key methodologies like STRIDE and PASTA and integrated threat modeling into their DevSecOps pipeline. Structured, role-specific training ensured everyone, from developers to core system engineers, received relevant education. The results were remarkable: $0.5 million annually saved on training and logistics. Estimated $10 million reduction in potential breach costs. 40% reduced time for threat modeling sessions. 30% more potential threats mitigated in the design phase. 45% reduction in high-severity production vulnerabilities. 150% increase in systems undergoing threat modeling. Achieved 100% compliance with security assessment regulations. This success story highlights the power of a scalable, practical, and continuously supported security education programme like the CTMP course in fostering a cultural shift and embedding threat modeling into a global bank's DNA, truly embracing the Shift-left culture. Learn how practical training, hands-on experience, and expert guidance can lead to significant efficiency gains, cost reductions, and enhanced security in complex financial environments.…

Practical DevSecOps

1
How a System Administrator Transformed into a Certified DevSecOps Engineer in 3 Months 14:00

15 روز پیش14:00

14:00

Welcome to the show! Today, we share an inspiring story of career transformation. We're talking to Kelly, who went from being a traditional system administrator focused on managing legacy systems to becoming a Certified DevSecOps Engineer. However, a major security incident – a vulnerable container image making it into production despite perimeter defences – was a real eye-opener. It showed her that traditional security methods weren't quite cutting it for modern, cloud-native applications. This pivotal moment sparked her interest in DevSecOps, but figuring out the next step wasn't immediately obvious. While she had solid Linux and basic Python skills, the world of DevSecOps demanded new expertise: thinking about secure CI/CD pipelines, understanding containers, and mastering tools for SAST, DAST, SCA, Infrastructure as Code, and Compliance as Code. Seeking a path forward, Kelly stumbled upon Practical DevSecOps through their extensive YouTube content. What really resonated wasn't just the technical depth, but their practical, real-world approach to security automation. As Kelly puts it, the free YouTube tutorials were "eye-opening". They didn't just show how to use tools, but explained why certain security controls were vital and how they fit into the overall picture of secure software delivery. She found the instructor's ability to explain complex concepts like Container Security Scanning and GitOps using real-world scenarios made everything "click". Even with such valuable free content, Kelly knew a structured learning path was essential to achieve her career goals. That’s why she made the decision to invest in the Practical DevSecOps Certification Course. Her study routine became intense but strategic: two hours dedicated to course materials every weekday evening and four to six hours on weekends for hands-on labs and practicing with open-source tools. Time management was her biggest challenge, juggling a full-time job with this intensive learning. But the course's modular structure helped her progress steadily, and the hands-on labs ensured she built practical skills every step of the way. Key technical skills she gained included building her first secure CI/CD pipeline using GitLab, learning to build container images, automating SCA and SAST tools, implementing automated vulnerability scanning with OWASP ZAP, setting up Infrastructure as Code security scanning with Checkov. She also gained an understanding of Compliance as Code and Vulnerability Management. She also absorbed the 'DevSecOps Gospel' – best practices for picking and automating tools. Just six months later, Kelly's enhanced skill set attracted attention, leading to opportunities at a major fintech company. Her interviews involved practical demonstrations of the skills she’d honed, like setting up secure pipelines in GitLab and Jenkins and building enterprise-level DevSecOps pipelines. The outcome? A senior DevSecOps engineer position with a remarkable 65% salary increase and the chance to lead security automation initiatives. Today, Kelly leads a team, implementing automated security testing in CI/CD, cloud-native controls, Compliance as Code frameworks, and security metrics. Beyond the technical wins, she finds the cultural change most rewarding. Developers now grasp security better, security teams appreciate automation, and secure features are delivered faster. Kelly firmly states her transformation "wouldn’t have been possible without the solid foundation I got from Practical DevSecOps". Kelly’s advice for aspiring DevSecOps professionals? Start with the right training, particularly through a Certified DevSecOps Professional course , to gain practical skills within a span of 3 months.…

Practical DevSecOps

1
Best DevSecOps Roadmap and Certifications in 2025 13:38

22 روز پیش13:38

13:38

Are you a DevOps professional, Software Engineer, or Security Engineer looking to level up your skills in 2025? Ever wondered how top tech companies ship new features fast while keeping their apps super-safe? It's all about DevSecOps – where security meets speed! This episode dives into the DevSecOps roadmap , your guide to success for building faster and safer. We'll outline a clear path for professionals to integrate security within the development process. Discover key certifications like the Certified DevSecOps Professional (CDP) for beginners and the Certified DevSecOps Expert (CDE) for experienced practitioners. Learn about essential skills such as building secure pipelines, vulnerability management, compliance implementation, and security integration. Understand the core technologies covered, including Cloud Environments, Docker Containerization, Ansible Automation, and Infrastructure as Code (IaC) . We'll explore critical security testing methods like Software Composition Analysis (SCA), Static Application Security Testing (SAST), and Dynamic Application Security Testing (DAST). For experienced professionals, we'll touch on advanced skills like implementing the DevSecOps Maturity Model , managing vulnerabilities at scale , and creating hardened golden images using Packer and Ansible . Explore how to transition to DevSecOps from other roles, focusing on DevOps basics like CI/CD and containerization, learning security fundamentals, and gaining practical experience. Is DevSecOps a good career choice? Absolutely! DevSecOps is a promising career in 2025 due to its growing demand, competitive salaries, and opportunities for growth in this high-demand field. As technology evolves and cyber threats rise, DevSecOps Engineers are increasingly sought after. We'll even look at average salary ranges in different regions like the United States, United Kingdom, and India. Following this roadmap and pursuing certifications can transform beginners into valuable team members capable of implementing secure pipelines and vulnerability management. Graduates of the Certified DevSecOps Professional program have reported seeing 20-30% salary increases within months . For experienced practitioners, the Certified DevSecOps Expert certification has helped many steps into senior leadership roles with expanded security architecture responsibilities. Gain real skills, pursue real certifications, and achieve real career growth in the cybersecurity industry. Tune in to learn more about this practical path to grow your career in DevSecOps!…

Practical DevSecOps

1
Become an AI Security Engineer in 8 Weeks - Fast-Track Guide 13:43

۴ weeks پیش13:43

13:43

Explore the critical and rapidly evolving field of AI security in 2025 and beyond. With AI now used in 40% of cyberattacks and 93% of companies facing these smart threats daily, the demand for skilled professionals to defend against them is soaring. This episode dives into the essential role of the AI Security Engineer , a vital position that combines expertise in both AI systems and security methods. We discuss the urgent need for AI security experts, driven by the significant financial costs of cybercrime and the use of AI in critical sectors like finance and healthcare. Learn about the unique vulnerabilities of AI systems and why traditional security approaches are often insufficient. Discover the diverse responsibilities of an AI Security Engineer, who works to secure machine learning systems throughout their entire lifecycle. Their key duties include: Protecting AI systems from attacks targeting data, models, and infrastructure. Conducting vulnerability assessments against AI models. Building defences against sophisticated AI-based attacks. Enforcing data privacy protocols. Performing threat modelling and testing AI for weaknesses. Developing incident response plans. Collaborating with Data Scientists and Developers to integrate security early in the AI product lifecycle. Understand the critical technical and soft skills necessary to excel. Technical skills include understanding various AI threats, security risks in AI models and LLMs, and specific attacks like OWASP Top 10 LLM attacks, adversarial attacks, data poisoning, and prompt injection . Expertise in securing applied AI areas like NLP and computer vision is also vital. Security professionals often use frameworks like MITRE ATLAS to map risks. Alongside technical prowess, critical thinking and collaboration with diverse teams are essential soft skills. We also explore pathways into AI security. While academic degrees in Computer Science or Cybersecurity provide a strong foundation, AI Security Specializations and certifications are increasingly important. The Certified AI Security Professional or CAISP certification is highlighted as an industry standard, validating practical skills in securing AI systems. Gaining practical experience through projects or hands-on labs is crucial for mastering detection and defence techniques. Finally, hear about the high demand and attractive career prospects in this field, with the average salary for an AI Security Engineer in the US reported at approximately $152,773 per year as of April 2025. Tune in to learn about the AI Security Engineer roadmap , the skills employers seek, and how you can secure your future in this vital and growing field. Help maintain the integrity of the AI technology that is shaping our world.…

به Player FM خوش آمدید!

Player FM در سراسر وب را برای یافتن پادکست های با کیفیت اسکن می کند تا همین الان لذت ببرید. این بهترین برنامه ی پادکست است که در اندروید، آیفون و وب کار می کند. ثبت نام کنید تا اشتراک های شما در بین دستگاه های مختلف همگام سازی شود.