How to make a Unicorn...
summary
Claim: demand outstrips supply with 3.5 million unfilled jobs by 2021 and attacks still hit web apps so 40% of data breaches stem from web applications. Practical fixes are automation and training not vague theory — he shows a working DevSecOps pipeline automated into the CI/CD process, scripts that log in and collect metrics, and a playbook: hire developers, train them in secure coding, build tooling to scale and shift security left.
AI-written summary · about
chapters (34)
- 0:00Intro
- 0:31Unicorns
- 0:41How this talk came about
- 1:28What is a Unicorn
- 2:22Franklins journey
- 2:49Franklins background
- 3:16Security vs Software
- 4:07Typical Job Listing
- 4:57Cybersecurity
- 6:03NonIT backgrounds
- 7:42Training
- 8:30Security
- 9:51Security wasnt always there
- 10:29Three phases of security
- 12:08Processes
- 12:44Tools
- 13:22Automation
- 14:44Security as a Service
- 15:05Skills Needed
- 15:58Builder Breaker Mindset
- 16:35Think like an attacker
- 17:20How to do it
- 18:36Summary
- 19:32Job Listing
- 20:43Simple Hygiene
- 22:44Recruiter Blueprint
- 23:27Filtering
- 23:56Men vs Women
- 24:29Keeping Older Security Tools
- 25:41Balancing the Market
- 26:13Compensation
- 27:32Talent
- 28:14Starting Small
- 30:10Threat Within
related talks
44mRuby Web Application Security Defense in Depth
45mTales of a Unicorn Herder - Security in Startups and Disruptive Teams
21mSecurity Hiring Trends
45mBuilding Secure Software: Practical Strategies for Developers
59mPractical Security for Web Applications
46mAre Developers the New Front Line of Security?
47mSecurity is Everybody's Job
52mContinuous Security