BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//DevOpsChat//Events//EN
CALSCALE:GREGORIAN
METHOD:PUBLISH
BEGIN:VEVENT
UID:01a1989d-2ca3-7040-97a7-c9ea9bcfff2e@www.devopschat.co
DTSTAMP:20261106T125258Z
DTSTART:20200929T100000Z
DTEND:20200929T110000Z
SUMMARY:[VIRTUAL] Houston DevOps Meetup -DevSecOps for your modern cloud ar
 chitecture
DESCRIPTION:Organizations are rapidly moving towards microservice style arc
 hitectures for their applications. Managing comprehensive security for con
 tinuous delivery of such applications across organizations continues to re
 main a serious bottleneck in the DevOps movement. Implementing effective s
 ecurity practices within delivery pipelines can be challenging.\n\nThe tal
 k shall begin with a view of Continuous Application Security\, through App
 lication Security Automation with SAST\, DAST & SCA and shall focus on rea
 l-world tools and techniques to automate application security tooling in C
 I/CD pipelines. Traditionally teams have used CI services like Jenkins to 
 continuously deliver applications. But there are issues with running CI se
 rvices like Jenkins on VPCs mainly due to the Maintenance Overhead and it 
 not being well suited for Container-Native workloads & Cloud-Native Deploy
 ments. This talk aims to showcase innovative approaches to running DevSecO
 ps pipelines with Cloud and Container Native approaches by leveraging serv
 ices like AWS Fargate\, Lambda and Step Functions for Security Orchestrati
 on and Security Workflows. The idea behind this approach is to leverage ep
 hemeral compute technologies to run CI services as opposed to persistent s
 ervices\, thereby reducing the overhead and leveraging State Machines to r
 un more complex security workflows\, especially in Microservice workloads\
 n\nBio:\nNithin Jois is a Solutions Engineer at we45 - a focused Applicati
 on Security company. He has helped build ‘Orchestron’ - A leading Appl
 ication Vulnerability Correlation and Orchestration Framework. He is exper
 ienced in Orchestrating containerized deployments securely to Production. 
 Nithin and his team have extensively used Docker APIs as a cornerstone to 
 most of we45 developed security platforms and he has also helped clients o
 f we45 deploy their Applications securely. Nithin is a passionate Open Sou
 rce enthusiast and is the co-lead-developer of ThreatPlaybook - An Open So
 urce framework that facilitates Threat Modeling as Code married with Appli
 cation Security Automation on a single Fabric. He has also written multipl
 e libraries that complement ThreatPlaybook. Nithin is an automation junkie
  who has built Scalable Scanner Integrations that leverage containers to t
 he hilt and is passionate about Security\, Containers and Serverless techn
 ology. He speaks at meetup groups\, webinars and training sessions. He par
 ticipates in multiple CTF events and has worked on creating Intentionally 
 Vulnerable Applications for CTF competitions and Secure Code Training.\n\n
 Nithin was a trainer and speaker at events like AppSecDC-2019\, AppSecUS-2
 018\, SHACK-2019\, AppSecCali-2019\, DefCon-2019\, BlackHat USA 2019\, App
 SecCali-2020 and many more. In his spare time\, he loves reading about per
 sonal finance\, leadership\, fitness\, cryptocurrency\, and other such top
 ics.\n\nNithin is an avid traveler and loves sharing stories over a cup of
  hot coffee.\n\nhttps://www.devopschat.co/meetings/virtual-houston-devops-
 meetup-devsecops-for-your-modern-cloud-architecture
URL:https://www.devopschat.co/meetings/virtual-houston-devops-meetup-devsec
 ops-for-your-modern-cloud-architecture
END:VEVENT
END:VCALENDAR