2014.10.29- Security@Scale- Diogo Monica, Square
summary
Company growth causes an inflection around 200 employees where security sleep drops from nine hours to much less; the claim is that automation and delegation reverse that trend and restore about eight and a half to nine hours. Built tools include Popquiz to fuzz staging, Doorman/UserDB for centralized SSO and expiring access, and Sting for self service alerts tied to Jira. Outcomes are automated ticketing with SLA mapping, managers owning fixes, expiry-driven least privilege, and about a 90% reduction in low‑signal alerts.
AI-written summary · about
chapters (12)
- 0:00Intro
- 1:35Vulnerability Management
- 3:05Discovery
- 11:05Access
- 18:58Security Monitoring
- 25:22Summary
- 28:44Logs
- 29:59Open Source
- 31:11Regression Testing
- 32:30Backlog
- 33:24Outreach
- 35:09Meeting with the VP
related talks
23mScalable security: how to win friends and not burn...
21mSecuring a Security Company
45mHow Leading Companies Are Scaling Their Security
41mUsing automation to scale security
54mScaling Security in Agile Scrum
43mTitans of Scale: Strategies to Scale Security in Expanding Organizations
24mBeing secure by design: Engineer-led security
58mBalancing Security and Agility While Scaling Your Company