[Owasp-sanantonio] Matt Tesauro on April 29th

Dan Cornell dan at denimgroup.com
Mon Apr 18 21:59:07 UTC 2016


All:

Matt Tesauro will be presenting at the next OWASP San Antonio meeting at 11:30 on Friday April 29th. Here’s the MeetUp link:
http://www.meetup.com/OWASP-San-Antonio/events/229235692/


Security folks: Bring a developer.
Developers: Bring a security person.
Everyone: Come and eat FREE LUNCH!


Title: Taking AppSec to 11: AppSec Pipelines, DevOps and Making Things Better


Abstract:
How many applications are in your company’s portfolio? What’s the headcount for your AppSec team? Whatever your situation is, I am sure the numbers are not in your favor. Its not time to find a new career, it's time to up your game. This talk will cover how to take your small merry band of AppSec professionals and scale it up to a virtual army. By taking the best of DevOps, Agile and CI/CD, you can iteratively up your AppSec game over time and begin your ascent out of the security hole you are in.
The talk covers real world experiences running AppSec groups at two different companies. Rackspace with approximately 4,000+ employees and Pearson with 40,000+. Both have an international presence and far more apps and developers that AppSec staff. The talk covers the key principles to speed and scale up AppSec programs using an AppSec Pipeline as well as practical examples of these practices put into use. Start early and begin to buy down the technical security dept which feels inevitable with more traditional AppSec program thinking.



Bio: 
Matt Tesauro is the a founder and CTO of Infinitiv, a Senior Software Security Engineer at Pearson and was previously the Senior Product Security Engineer at Rackspace.  He is also an Adjunct Professor for the University of Texas Computer Science department teaching the next generation of CS students about Application Security.  Matt is broadly experienced information security professional of 15 years specializing in application and cloud security. He has also presented and provided trainings at various international industry events including DHS Software Assurance Workshop, OpenStack Summit, SANS AppSec Summit, AppSec US, EU and LATAM.  His work has included security consulting, penetration testing, threat modeling, code reviews, training and teaching at the University of Texas and Texas A&M University. He is a former board member of the OWASP Foundation and project lead for OWASP AppSec Pipeline & WTE projects. WTE is a collection of application security testing tools.  He holds two degrees from Texas A&M University and several security and Linux certifications.



Thanks,

Dan



More information about the Owasp-sanantonio mailing list