Reto Kaeser
You can’t hack what you can’t see
#1about 3 minutes
The cultural shift from DevOps to DevSecOps
DevOps succeeded by fostering a culture of shared responsibility, and now security must be integrated to break down the final silo.
#2about 8 minutes
Integrating security into requirements and design phases
Proactively address security by defining abuse cases during requirements and classifying or anonymizing data during the design phase.
#3about 5 minutes
Hardening the CI/CD pipeline with automated security tools
Shift security left by integrating automated vulnerability management for dependencies and continuous penetration testing into the CI/CD process.
#4about 3 minutes
Why traditional firewalls fail against internal east-west traffic
Most network traffic occurs internally between services (east-west), bypassing perimeter firewalls and exposing a soft interior to application-level attacks.
#5about 3 minutes
Moving from perimeter defense to workload microsegmentation
Protect against internal threats by decoupling security from the network and applying logical firewalls directly to each workload through microsegmentation.
#6about 4 minutes
Applying Zero Trust principles with security as code
Implement a Zero Trust model by having developers define workload communication intentions as code, which automatically generates and enforces security policies.
#7about 2 minutes
The benefits of a modern workload-centric security architecture
Adopting a Zero Trust, workload-centric model provides benefits like increased agility, complete application-level visibility, automated compliance, and real-time forensics.
#8about 1 minute
A developer's responsibility to build secure software
Developers must take ownership of security by adopting a paranoid mindset to build more resilient software in an increasingly dangerous cloud environment.
Related jobs
Jobs that call for the skills explored in this talk.
Technoly GmbH
Berlin, Germany
€50-60K
Intermediate
Network Security
Security Architecture
+2
aedifion GmbH
Köln, Germany
€30-45K
Intermediate
Network Security
Security Architecture
+1
zeb consulting
Frankfurt am Main, Germany
Remote
Junior
Intermediate
Senior
Amazon Web Services (AWS)
Cloud Architecture
+1
Matching moments
05:55 MIN
The security risks of AI-generated code and slopsquatting
Slopquatting, API Keys, Fun with Fonts, Recruiters vs AI and more - The Best of LIVE 2025 - Part 2
05:17 MIN
Europe's push for digital independence from US tech
WeAreDevelopers LIVE – AI, Freelancing, Keeping Up with Tech and More
02:48 MIN
Building trust through honest developer advocacy
Devs vs. Marketers, COBOL and Copilot, Make Live Coding Easy and more - The Best of LIVE 2025 - Part 3
06:33 MIN
The security challenges of building AI browser agents
AI in the Open and in Browsers - Tarek Ziadé
07:39 MIN
Prompt injection as an unsolved AI security problem
AI in the Open and in Browsers - Tarek Ziadé
03:07 MIN
Final advice for developers adapting to AI
WeAreDevelopers LIVE – AI, Freelancing, Keeping Up with Tech and More
03:45 MIN
Preventing exposed API keys in AI-assisted development
Slopquatting, API Keys, Fun with Fonts, Recruiters vs AI and more - The Best of LIVE 2025 - Part 2
01:53 MIN
The role of a freelancer integrated within a team
WeAreDevelopers LIVE – AI, Freelancing, Keeping Up with Tech and More
Featured Partners
Related Videos
21:53Simple Steps to Kill DevSec without Giving Up on Security
Isaac Evans
33:20DevSecOps: Security in DevOps
Aarno Aukia
58:19Typed Security: Preventing Vulnerabilities By Design
Michael Koppmann
51:41Climate vs. Weather: How Do We Sustainably Make Software More Secure?
Panel Discussion
22:18Why Security-First Development Helps You Ship Better Software Faster
Michael Wildpaner
37:36Walking into the era of Supply Chain Risks
Vandana Verma
27:36Unleashing the Power of Developers: Why Cybersecurity is the Missing Piece?!?
Tino Sokic
24:01What The Hack is Web App Sec?
Jackie
Related Articles
View all articles
From learning to earning
Jobs that call for the skills explored in this talk.
cyberunity AG
DNS
Azure
DevOps
Terraform
Network Security
Akamai
Remote
Senior
Azure
Kubernetes
Microservices
Network Security
+2
Rocken AG
Zürich, Switzerland
CHF100-120K
Network Security
CloudCommand GmbH
Wilhelmshaven, Germany
Network Security
Network administration
CloudCommand GmbH
Recklinghausen, Germany
Network Security
Network administration
CloudCommand GmbH
Stade, Germany
Network Security
Network administration
CloudCommand GmbH
Remscheid, Germany
Network Security
Network administration
CloudCommand GmbH
Schwerte, Germany
Network Security
Network administration
CloudCommand GmbH
Wesel, Germany
Network Security
Network administration