In the fifth installment of The Secure Developer, Guy talks with Chef CTO Adam Jacob about the role security can play in DevOps and continuous integration/deployment. They cover the differences between baked-in and bolted on security and how automation with Habitat can change the way developers approach secure coding.

Producer: Ted Carstensen
Editor: Lucas Oswald

Subscribe in iTunes

The Secure Developer - Ep. #5, Continuous Security at Chef

In this episode of The Secure Developer, Ben Bernstein from Twistlock joins Guy to discuss container security. Are you currently using containers, or thinking about moving to containers in your stack? You won’t want to miss this episode.

With containers, developers control the entire stack. While empowering to developers, this can also open up new security vulnerabilities. Ben and Guy discuss the tools and processes you’ll need to put in place to ensure your containers are compliant and secure.

The Secure Developer - Ep. #7, Understanding Container Security

In the latest episode of The Secure Developer, Guy is joined by Arup Chakrabarti, Kevin Babcock and Rich Adams from PagerDuty. They discuss how they put into practice their security vision of “making it easy to do the right thing”.

This involves picking the right tooling and designing a security experience that doesn’t force people to do things, but rather provides insight into how vulnerabilities can be exposed. Giving people the opportunity to break things also creates a strong desire to want to then protect those things.

The Secure Developer - Ep. #11, Keeping PagerDuty Secure

In episode 16 of The Secure Developer, Guy is joined by Masha Sedova, co-founder of Elevate Security, to discuss how training for employees (even developers) can help companies stay one step ahead of the pack when it comes to preventing a breach.

The Secure Developer - Ep. #16, Security Training with Elevate's Masha Sedova

In episode 19 of The Secure Developer, Guy meets with Allison Miller, SVP Engineering for Bank of America, to discuss the ways technology and security have intersected throughout her career.

The Secure Developer - Ep. #19, Measuring Security with Bank of America's Allison Miller

In episode 20 of The Secure Developer, Guy speaks to Dan Cornell of Denim Group, the developer security firm behind ThreadFix, a vulnerability resolution platform.

The Secure Developer - Ep. #20, Using ThreadFix with Dan Cornell of Denim Group

In episode 23 of The Secure Developer, Guy speaks with Zach Powers, CISO of One Medical, to discuss the evolution of security at One Medical, what he looks for when hiring for his team, and why automation is a must.

The Secure Developer - Ep. #23, Automation with One Medical's Zach Powers

In episode 24 of The Secure Developer, Guy is joined by Omer Levi Hevroni, DevSecOps Engineer at Soluto, to discuss application security, OWASP, security 'mavens,' and more.

The Secure Developer - Ep. #24, Application Security with Omer Levi Hevroni

In episode 28 of The Secure Developer, Guy is joined by Jason Chan of Netflix to discuss simplifying the security process for software developers, as well as some of the open source projects Netflix has shared with the community.

The Secure Developer - Ep. #28, Developer Empathy with Jason Chan of Netflix

In episode 29 of The Secure Developer, Guy sits down with Liran Tal, Developer Advocate at Snyk, to discuss the state of open source, Docker security, and developer infrastructure.

The Secure Developer - Ep. #29, The State of Open Source & Docker Security

Heavybit is the leading early-stage investor in enterprise infrastructure. Since 2013, we've helped launch and scale visionary technical startups—from DevSecOps and feature flagging to AI code generation and beyond. We go hands-on from day 0, backing founders as they turn code into companies and build the future of software from the bottom up to the top down.

Popular tracks tagged #the secure developer