Beyond Firefighter vs. Safety Matches - Growing the DevSecOps Pipeline

Explore strategies for developing a balanced DevSecOps talent pipeline in this 28-minute conference talk from LISA21. Delve into the challenges of overspecialization in security and overgeneralization in DevSecOps, and discover techniques to navigate modern systems development, operations, and security effectively. Learn from industry experiences, analyze problem models, and understand the importance of shared responsibility in creating successful DevSecOps practices. Gain insights on finding the right balance between specialized skills and generalized knowledge to address contemporary cybersecurity challenges and foster a more resilient organizational approach to security.

Intro
Welcome
The Problem
Back Pressure
Too Much
Happy Medium
Specialization
Balance
Wheres the Data
Industry Response
The Problem with Science
My Experiences
Problem Models
Gap Analysis
Not Everything Fits
Conclusion