Alyssa Miller -- Bringing security to DevOps and the CI/CD pipeline

Alyssa Miller is a life-long hacker, security advocate, and cybersecurity leader. She is the BISO for S&P Global ratings and has over 15 years of experience in security roles. She is heavily involved in the cybersecurity community as an international speaker, author, and advocate. Alyssa joins us to talk about bringing security to DevOps and the CI/CD pipeline. We talk about the success of the DevOps transformation, mistakes AppSec teams make with DevOps and explore the possible idea that DevSecOps is its own silo. We hope you enjoy this conversation with... She's the BISO for S&P Global Ratings and has over 15 years of experience in security roles.

The Application Security Podcast is brought to you by Security Journey.

About Security Journey
Alyssa Miller is a lifelong hacker, security advocate, and cybersecurity leader.
→ Learn more about Security Journey

Connect with Alyssa Miller:
→ S&P Global Ratings
→ Alyssa Miller

Mentioned in this episode:
→ S&P Global Ratings
→ Alyssa Miller
→ Alyssa Miller
→ Alyssa Miller
→ Azure DevOps
→ DevOpsDays
→ Patrick Debois
→ Patrick DeBois
→ Snyk
→ WhiteSource (now Mend)

Follow the Application Security Podcast:
➜ Home
➜ X
➜ LinkedIn
➜ YouTube
➜ Instagram
➜ Facebook

Chapters:
00:00 Meet Alyssa Miller: Bringing security to DevOps and the CI/CD pipeline
08:40 I love the way you came back to culture at the
09:58 I hear governance, I want to dive into this a little
13:23 I think. You mentioned about DevOps being culture and change. Now
17:13 You mentioned Netflix. I remember in the early days, there was
19:38 I want to switch gears a little bit, and as we
25:03 Yep, and this ties directly into, like the two of you
30:08 And we sort of already hit on a couple of aspects
33:44 Yeah, I think that's— I like that approach that you're describing
37:23 Tilt left, tilt left with the camera. Alyssa, as we're coming