Session Name: Listen Up Security Professionals: What Modern Development and Engineering Practitioners Can Teach Us
It's time to put away the checklists and leave the written standards at the door. Getting security work done starts with understanding how teams want to work, then delivering capabilities directly in their workstream via code and automation, and then provide meaningful and actionable feedback. Oh, and actively be looking for and open to receive feedback yourself.
For the last three years, Jeff has been learning daily from the modern development and engineering teams he supports, constantly looking at how the "security thing" can be done smarter, faster, better through an ever-evolving product security service catalog. Overall, Jeff has 20+ years of security experience spanning various roles, from network, system, and cloud security to penetration testing to incident response and security architecture.