CSCP S03EP19- Amanda Alvarez - Cloud Dev and SecOps the metrics that matters

CSCP_S03EP20-_Amanda_Alvarez_-_Cloud_Dev_and_...

Amanda Alvarez is the Senior DevSecOps Engineer at Trace3. Francesco and Amanda met online in a Meetup group called “Let’s Talk Software Security!” Today they discuss building an application security program, managing technical debt, and Amanda’s advice for avoiding burnout as a security professional.

The episode is brought to you by Phoenix Security Cloud; get in control of your vulnerabilities from code to cloud with the power of Phoenix. ACT Now on the vulnerabilities that matters most and reduce your exposure to modern attacks

https://www.appsecphoenix.com to get a free 30-day licence quoting CSCP https://landing.appsecphoenix.com/register

0:00 Introductions

3:24 State of Industry

4:00 Cloud adoption

6:57 Vulnerability mangement

9:44 AppSec, CloudSec, patch management

12:17 Asset and vulnerability management

19:52 Feedback loop

23:15 Company polities

28:40 Support from leadership

30:30 Positive message

33:30 Get connected