Topic

DevSecOps talks at BSides

245 talks tagged DevSecOps from 71 chapters of BSides events worldwide.

Detection-as-code: Why it works and where to start

BSidesSF · 2022

Technical DevSecOps Talk

Open →2022-07

How to 10X Your Company's Security (Without a Series D)

BSidesSF · 2020

Technical Cloud IAM DevSecOps Threat Modeling Blue Talk

Open →2020-03

Hackers are Shifting Left, Too

BSides Ahmedabad

Open →2023-02

Climbing the Production Mountain: Practical CI/CD Attacks Using CI/CD Goat

Omer Gil Asaf Greenholts

BSides Las Vegas · 2022

Technical DevSecOps Supply Chain Security Red Demo

Open →2022-09

Embracing Risk Responsibly: Moving beyond inflexible SLAs and exception hell

BSidesSF · 2022

Technical DevSecOps Talk

Open →2022-07

Understanding Your Vulnerability Data To Optimize Your DevOps Pipeline Flow by Chris Madden

BSides Dublin · 2023

Technical DevSecOps Talk

Open →2023-07

Fighting Secrets In Source Code With TruffleHog

BSidesSF · 2018

Technical Tooling DevSecOps Supply Chain Security Vulnerability Research Talk

Open →2018-04

Overwatch: A serverless approach to orchestrating your security automation

Sanchay Jaipuriyar

BSidesSF · 2023

Technical DevSecOps Talk

Open →2023-05

Continuous Integration: Stalking Vulnerabilities with Puma Scan

BSides Iowa · 2017

Technical DevSecOps Vulnerability Research Case Studies and Incidents Analysis Talk

Open →2017-04

Detection as Code: The Engineering-Focused Future of Detection and Response

Jackie Bow Julie Agnes Sparks Jessica Rozhin Louis Barrett

BSidesSF · 2023

Technical Detection Engineering DevSecOps Threat Intel Blue Panel

Open →2023-05

BSidesSF 2019 - DevSecOps State of the Union (Clint Gibler)

BSidesSF · 2019

Technical DevSecOps Talk

Open →2019-03

Continuous Security Testing in a DevOps World

Stephen de Vries

BSides London · 2014

Technical DevSecOps Web AppSec Demo Talk

Open →2014-05

Make Alerts Great Again

BSidesSF · 2017

Technical DevSecOps Talk

Open →2017-03

RedOps: Automating your Red Team Infrastructure

BSides Charleston · 2018

Technical DevSecOps Tooling Red Talk

Open →2018-11

Tales of Red Teaming (Continuous Intrusion Continuous Deception)

Aladdin Mubaied Rahul Nair

BSidesSF · 2018

Technical Container Security DevSecOps Red Talk

Open →2018-04

Supercharge Your Workflow: Using WhiteRabbitNeo for AI-Powered Analysis

Bailey Williams

BSides Charm · 2025

Technical AI Security DevSecOps Vulnerability Research Red Talk

Open →2025-05

BSidesSF · 2023

Technical DevSecOps Supply Chain Security Intro Blue Talk

Open →2023-05

A Pentester's Guide To Left Shifting Security

BSides Leeds · 2019

Technical DevSecOps Talk

Open →2019-01

BSidesSF 2023 - Securing the Pipeline: Protecting Self-Hosted GitHub Runners (Adnan Khan)

BSidesSF · 2023

Technical DevSecOps Supply Chain Security Talk

Open →2023-05

AI Agents in the SDLC: Productivity, Security & the Developer Paradox

BSides SLC · 2025

Technical DevSecOps Talk

Open →2025-10

From soup to nuts: Building a Detection-as-Code pipeline - David French

BSides SATX · 2024

Technical DevSecOps Talk

Open →2024-06

Infrastructure as RCE: How to abuse Terraform to elevate access

BSides NYC · 2023

Technical Cloud IAM DevSecOps Vulnerability Research Red Talk

Open →2023-06

Security Automation Simplified

BSidesSF · 2019

Technical DevSecOps Intro Talk

Open →2019-03

Windows Event Forwarding and OSSEC — You can do this!

BSides Augusta · 2018

Technical DevSecOps Blue Talk

Open →2018-11

Rolling out the C2: Red Team Infrastructure in 2024

BSides Las Vegas · 2024

Technical Cloud IAM DevSecOps Red Demo Talk

Open →2024-09

SecOps Automation And Orchestration

Nicolas Mattiocco

BSides Lisbon · 2018

Technical DevSecOps Tooling Vulnerability Research Talk

Open →2018-12

CI/CD Security: A New Eldorado

Remi Escourrou Xavier Gerondeau Gauthier Sebaux

BSides Las Vegas · 2022

Technical Cloud IAM DevSecOps Supply Chain Security Red Talk

Open →2022-09

Breaking Build: Red Teaming CI/CD Pipelines and GitHub Actions [BSidesPDX 2024]

BSides PDX · 2024

Technical DevSecOps Red Talk

Open →2024-11

Signing your code the easy way

BSides DC · 2019

Technical DevSecOps Supply Chain Security Talk

Open →2019-11

To Normalized Logs, and Beyond - Building a Threat Detection Platform from Scratch

David Levitsky Brian Maloney

BSidesSF · 2023

Technical DevSecOps Blue Talk

Open →2023-05

Is Your Approach To Pipeline Security Flawed? Rethinking CI/CD Security

BSides London · 2025

Technical DevSecOps Supply Chain Security Intermediary Talk

Open →2025-02

BSidesSF 2020 - Mistakes Made Integrating Security Scanning into CI/CD (Atul G • Moses S)

Atul Gaikwad Moses Schwartz

BSidesSF · 2020

Technical DevSecOps Case Studies and Incidents Analysis Talk

Open →2020-11

How to Manage DevSecOps

Talha Karakumru

BSides Athens · 2023

Technical DevSecOps Talk

Open →2023-06

For Crying Out Cloud - Stu Hirst and Tash Norris

Stu Hirst Tash Norris

BSides Munich · 2019

Technical Cloud IAM DevSecOps Threat Modeling Blue Talk

Open →2019-03

When DevSecOps Fails

BSides Las Vegas · 2022

Technical DevSecOps Vulnerability Research Talk

Open →2022-09

Quaid DeLacluyse - DevAttackOps: Full Stack Red Team

Quaid DeLacluyse

Technical DevSecOps Red Talk

Open →2022-10

5 Keys to Building an App Sec Program in the Age of DevOps

BSidesSF · 2017

Technical DevSecOps Talk

Open →2017-03

Minimizing AWS S3 bucket attack vectors at scale

BSides Dallas/Fort Worth · 2022

Technical Cloud IAM DevSecOps Blue Talk

Open →2022-11

Open Source GitOps for Detection Engineering

BSides Las Vegas · 2023

Technical Detection Engineering DevSecOps Blue Demo Talk

Open →2023-10

BSidesSF 2023 - Stop Committing Your Secrets - Git Hooks To The Rescue! (Dwayne McDaniel)

Dwayne Mcdaniel

BSidesSF · 2023

Technical DevSecOps Talk

Open →2023-05

DIY Patch Management

Florian Junge Ingo Bente

Technical DevSecOps Vulnerability Research Talk

Open →2018-04

Doctor Docker: Building Your Infrastructure's Immune System

Mike McCabe Patrick Cooley

BSides DC · 2014

Technical Container Security DevSecOps Supply Chain Security Demo Talk

Open →2014-10

Weaponizing Ansible

Christopher Grimm

BSides Charleston · 2017

Technical DevSecOps Tooling Blue Red Talk

Open →2017-11

You Might Still Need Patches for Denim

Maya Kaczorowski Dan Lorenc

BSidesSF · 2019

Technical DevSecOps Supply Chain Security Talk

Open →2019-03

Are your GitHub Actions secure?

BSides Lisbon · 2022

Technical DevSecOps Supply Chain Security Red Talk

Open →2023-01

Purple is the New Black: Modern Approaches to Application Security

BSidesSF · 2020

Technical Cloud IAM DevSecOps Web AppSec Intermediary Purple Talk

Open →2020-03

BSidesSF 2018 - KubeScope for the Extraordinary World of Containers (Tongbo Luo • Zhaoyan Xu)

Tongbo Luo Zhaoyan Xu

BSidesSF · 2018

Technical DevSecOps Demo Talk

Open →2018-04

AppSec as Glue: Building Partnerships to Scale Security

Mukund Sarma Tad Whitaker Sarah Liu Ariel Shin Jacob Salassi

BSidesSF · 2025

Technical Career & Soft Skills DevSecOps Panel

Open →2025-06

BSidesSF 2020 - Lessons from DevSecOps Trenches (Clint G • Zane L • Astha S • Justine O • Doug D)

Clint Gibler Zane Lackey Astha Singhal Justine Osborne Doug DePerry

BSidesSF · 2020

Career DevSecOps Panel

Open →2020-03

Action Anomalies: A Hacker's Guide to Github Actions

BSides Tallinn · 2024

Technical DevSecOps Supply Chain Security Vulnerability Research Case Studies and Incidents Analysis Technical Deep-dives Talk

Open →2024-10

You Don't Have to Patch!

Jasvir Nagra Pedro Fortuna

BSides Lisbon · 2023

Technical DevSecOps Threat Modeling Web AppSec Intermediary Talk

Open →2024-02

The Secure Metamorphosis: Streaming Logs with Kafka and TLS

BSidesSF · 2019

Technical DevSecOps Network Security Talk

Open →2019-03

Effective building blocks for securing multi-tenant Kubernetes clusters

Shrikant Pandhare Sagiv Sheelo

BSidesSF · 2024

Technical Cloud IAM Container Security DevSecOps Case Studies and Incidents Analysis Talk

Open →2024-07

BSidesSF 2019 - Containers: Your Ally in Improving Security (Connor Gilbert • Connor Gorman)

Connor Gilbert Connor Gorman

BSidesSF · 2019

Technical DevSecOps Talk

Open →2019-03

Securing Fast and Furious DevOps Pipelines

Abdessamad Temmar

BSides Las Vegas · 2019

Technical DevSecOps Supply Chain Security Blue Talk

Open →2019-10

Compliance Without the Chaos: Building It Right Into Your DevOps Pipeline

BSidesSF · 2025

Technical DevSecOps Talk

Open →2025-06

DevOps and the Future of Information Security

BSides Cape Town · 2018

Technical DevSecOps Talk

Open →2019-02

Opinionless Enforcement of Opinions on Operational Secrets

Jonathan Freedman

BSidesSF · 2017

Technical DevSecOps Talk

Open →2017-03

Playing Peekaboo With Runtime In CI/CD Pipelines

BSides London · 2025

Technical DevSecOps Supply Chain Security Intermediary Talk

Open →2026-03

Why I am (still) finding secrets in your code

BSides Canberra · 2025

Research Technical DevSecOps Supply Chain Security Vulnerability Research Blue Case Studies and Incidents Analysis Empirical Research+1

Open →2025-12

DevOps Application Security Teams for the Rest of Us

BSides DC · 2018

Technical DevSecOps Talk

Open →2018-11

Don't Sh*t-Left: How to Actually Shift-Left

BSidesSF · 2025

Technical AI Security DevSecOps Talk

Open →2025-06

Pipeline Pandemonium: How to Hijack the Cloud and Make it Rain Insecurity

BSides Las Vegas · 2024

Technical Cloud IAM DevSecOps Supply Chain Security Red Case Studies and Incidents Analysis Technical Deep-dives Talk

Open →2024-09

Adding DAST to CI/CD Without Losing Friends

BSides Munich · 2022

Technical DevSecOps Web AppSec Keynote

Open →2022-05

BSidesBUD2022: Github Actions Security Landscape

Alex Ilgayev Ilia Shkolyar

BSides Budabest · 2022

Technical DevSecOps Supply Chain Security Empirical Research Technical Deep-dives Talk

Open →2023-06

My CI/CD Pipeline Contains All Security Tools Available! Now What...?

Technical DevSecOps Supply Chain Security Threat Modeling Talk

Open →2023-10

How to Kickstart an Application Security Program

Timothy DeBlock

BSides Knoxville · 2017

Career Technical Career & Soft Skills DevSecOps Talk

Open →2017-06

So You Think You Can Detect? Detection Testing in Production

BSides SLC · 2025

Technical DevSecOps Purple Demo Talk

Open →2025-06

Unsafe Harbor: Practical Attacks on Docker Infrastructure

BSides PDX · 2018

Technical DevSecOps Red Talk

Open →2019-02

DevSecOps for Security Teams

BSides Pakistan · 2021

Technical DevSecOps Supply Chain Security Talk

Open →2021-10

Sure, Let Business Users Build Their Own. What Could Go Wrong?

Michael Bargury

BSidesSF · 2023

Technical Cloud IAM DevSecOps Threat Modeling Intermediary Case Studies and Incidents Analysis Talk

Open →2023-05

Hiding in Plain Sight - Weaponizing Developer Applications and Interpreted Languages to Evade EDR

BSides Philly · 2025

Technical DevSecOps Malware Analysis Reverse Engineering Advanced Red Technical Deep-dives Talk

Open →2026-02

One-Click Code Fix: Securing Code Using AI

Chandrani Mukherjee Joseph Seasly

BSidesSF · 2024

Technical DevSecOps Demo Talk

Open →2024-07

Serverless Security Testing: Challenges and Solutions

Tal Melamed Meir Benayoun

BSides TLV · 2022

Technical Cloud IAM DevSecOps Vulnerability Research Technical Deep-dives Talk

Open →2022-07

Application security into DevOps

Svetlomir Balevski

BSides Sofia · 2022

Technical DevSecOps Talk

Open →2022-04

Security Learns to Sprint: DevSecOps

BSidesSF · 2020

Technical DevSecOps Talk

Open →2020-03

Tales from the DevSecOps world: SIEM completely as Code

George Tsigourakos Kyriaki Solomidou John Torakis

BSides Athens · 2022

Technical DevSecOps Talk

Open →2022-06

Turnkey Code – Enhancing Secrets Management in Large Scale Organizations

BSides Lisbon · 2024

Technical DevSecOps Supply Chain Security Blue Talk

Open →2024-12

Oops!!... Did I Reveal Something? Detecting Leaked Secrets in Azure Deployment Templates

BSides Cape Town · 2023

Technical Cloud IAM DevSecOps Blue Red Talk

Open →2023-12

DevSecOps Isn't Real

Ethan Witherington

BSidesROC · 2025

Technical DevSecOps Talk

Open →2025-03

Chaos Engineering: Break It On Purpose by Morgan Carter

BSides London · 2022

Technical DevSecOps Intermediary Blue Technical Deep-dives Talk

Open →2022-01

Dependable Red Teaming by Using Confusion

BSides Cape Town · 2025

Technical DevSecOps Supply Chain Security Red Technical Deep-dives Demo Talk

Open →2025-03

Jedi Mind Tricks: Application Security for Developers and Executives

David Rook Chris White

BSides London · 2014

Technical Career & Soft Skills DevSecOps Talk

Open →2014-09

Container Security, Are You Doing It Wrong?

Jeff Weatherford

BSides Tampa · 2024

Technical Container Security DevSecOps Supply Chain Security Intermediary Talk

Open →2024-05

Look Ma, No Hands! Decentralizing Security for Scale

BSidesSF · 2017

Community Technical Detection Engineering DevSecOps Talk

Open →2017-03

Beyond Whack-a-Mole: Scaling Vulnerability Management by Embracing Automation

BSides Las Vegas · 2024

Technical DevSecOps Supply Chain Security Vulnerability Research Blue Talk

Open →2024-09

Where and how to implement Security in Software Development

Radostina Kondakova Jordan Popov

BSides Sofia · 2022

Technical DevSecOps Threat Modeling Web AppSec Methodology Talk

Open →2022-04

IAC (Infrastructure-As-Code) SAST - What's That?

Technical DevSecOps Talk

Open →2022-05

Github Actions Security Landscape by Alex Ilgayev

BSides Dublin · 2023

Technical DevSecOps Talk

Open →2023-07

A Developer's Guide for Building Zero Trust Ready Apps

BSides Peru · 2022

Technical Cloud IAM DevSecOps Talk

Open →2022-09

Testing Defensive Controls w/ atomic-operator - Josh Rickard

BSides KC · 2022

Technical DevSecOps Blue Talk

Open →2022-10

Building A Modern, Scalable and Effective Application Security Program

Abdessamad Temmar

BSides Prishtina · 2024

Technical AI Security DevSecOps OWASP Threat Modeling Case Studies and Incidents Analysis Talk

Open →2024-09

Shift Left, Secure Right, Building An Open Source SBOM Driven Vulnerability Management System

Cosimo Commisso

BSides Toronto · 2024

Technical DevSecOps Supply Chain Security Vulnerability Research Talk

Open →2024-10

Whose Pipeline Is It Anyway?: Attacks and Defenses in the World of CI/CD

Matt Bosack Zach Satterly

BSides Philly · 2023

Technical DevSecOps Supply Chain Security Blue Red Talk

Open →2024-01

Infrastructure as Code: Managing Environments with Terraform and Ansible

BSides Leeds · 2023

Technical Cloud IAM DevSecOps Talk

Open →2023-07

Close DevSecOps Awareness and Guide to Practical Implementation

BSides DC · 2018

Technical DevSecOps Talk

Open →2018-11

Building a Secure Environment for Operations Using Docker

BSides Augusta · 2017

Technical DevSecOps Demo Talk

Open →2017-09

Actions Have Consequences: The Overlooked Security Risks in 3rd Party GitHub Actions

BSides Las Vegas · 2023

Technical DevSecOps Supply Chain Security Talk

Open →2023-10

Rooting out Security Risks Lurking in your CI/CD Pipelines

Vasant Chinnipilli

BSides Berlin · 2021

Technical Container Security DevSecOps Supply Chain Security Talk

Open →2021-09

The Road to Developers' Hearts

Sing Ambikapathi

BSidesSF · 2024

Community Career & Soft Skills DevSecOps Talk

Open →2024-07

View all 245 talks tagged DevSecOps →