Alyssa Miller -- Bringing security to DevOps and the CI/CD pipeline

Alyssa Miller is a life-long hacker, security advocate, and cybersecurity leader. She is the BISO for S&P Global ratings and has over 15 years of experience in security roles. She is heavily involved in the cybersecurity community as an international speaker, author, and advocate. Alyssa joins us to talk about bringing security to DevOps and the CI/CD pipeline. We talk about the success of the DevOps transformation, mistakes AppSec teams make with DevOps and explore the possible idea that DevSecOps is its own silo. We hope you enjoy this conversation with... She's the BISO for S&P Global Ratings and has over 15 years of experience in security roles.The Application Security Podcast is brought to you by Security Journey.About Security JourneyAlyssa Miller is a lifelong hacker, security advocate, and cybersecurity leader.→ Learn more about Security JourneyConnect with Alyssa Miller:→ S&P Global Ratings→ Alyssa MillerMentioned in this episode:→ S&P Global Ratings→ Alyssa Miller→ Alyssa Miller→ Alyssa Miller→ Azure DevOps→ DevOpsDays→ Patrick Debois→ Patrick DeBois→ Snyk→ WhiteSource (now Mend)Follow the Application Security Podcast:➜ Home➜ X➜ LinkedIn➜ YouTube➜ Instagram➜ FacebookChapters:00:00 Meet Alyssa Miller: Bringing security to DevOps and the CI/CD pipeline08:40 I love the way you came back to culture at the09:58 I hear governance, I want to dive into this a little13:23 I think. You mentioned about DevOps being culture and change. Now17:13 You mentioned Netflix. I remember in the early days, there was19:38 I want to switch gears a little bit, and as we25:03 Yep, and this ties directly into, like the two of you30:08 And we sort of already hit on a couple of aspects33:44 Yeah, I think that's— I like that approach that you're describing37:23 Tilt left, tilt left with the camera. Alyssa, as we're coming