Securing the AWS environments of Arkose Labs using Sysdig (PRT258)
summary
Company grows from five to 250+ and faces noisy cloud alerts and scattered responsibility, so mid‑2021 it hires two IT security engineers, enables CloudTrail->Microsoft Sentinel, turns on AWS Security Hub, then adopts Sysdig to unify findings and reduce noise. Risk prioritization uses Sysdig Risk Spotlight to show which CVEs are actually executed, filters unfixable items, and routes actionable items into Jira; developers earn bonus sleep points for reporting issues and each team picks an engineering security champion (one per team).
AI-written summary · about
chapters (9)
- 0:00Introductions and overview
- 4:25Company growth and security
- 6:55The bystander effect
- 12:27Scaling security operations
- 18:05Prioritization and tooling
- 21:52Supply chain and compliance
- 24:32Reporting and culture
- 30:33Shift-left security
- 36:03Engineering partnership
related talks
36mThe Road To Being Rugged
01h 02mSecuring data and democratizing the alert landscape
21mSecuring a Security Company
49mBuilding digital resilience with unified security and observability
17mIdentify and solve security risks faster with Application Signals
19mSecuring your AWS environment with automated DSPM
47mCentralizing security at scale w/ Security Hub & Intuit’s experience
20mSecurity Culture & Scaling Your Security Humans