Jeroen Willemsen -- Security automation with ci/cd

Jeroen Willemsen is a Principal Security Architect at Xebia. Jeroen is more or less a jack of all trades with an interest in infrastructure security, risk management, and application security. With a love for mobile security, he enjoys sharing knowledge on various security topics. Jeroen joins us to unpack security automation in a DevOps world. We discuss categories of tools, typical quick wins, potential downsides, and how dependency management specifically plays into automation. We hope you enjoy this conversation with... We hope you enjoyed this conversation with Jeroen Willemsen. Are you trying to build a security champions program? Everyone is these days. One challenge of rolling out security champions is how do we educate all these new folks?The Application Security Podcast is brought to you by Security Journey.About Security JourneyJeroen Willemsen is a Principal Security Architect at Zebia.→ Learn more about Security JourneyConnect with Jeroen Willemsen:→ Xebia→ OWASP Dependency-CheckMentioned in this episode:→ Xebia→ OWASP Dependency-CheckFollow the Application Security Podcast:➜ Home➜ X➜ LinkedIn➜ YouTube➜ Instagram➜ FacebookChapters:00:00 Meet Jeroen Willemsen: Security automation with ci/cd02:21 We'll stay with your original name. No problem there. So we04:54 Just diving in here, one of the things I think we're07:35 Between SAST, DAST, SCA. You didn't even mention like IAST and10:20 That's probably— they're probably stuck on that level of— and so13:10 Yeah. And in the danger of creating a monster fight on15:29 Like, yeah, yeah, too far back to even remember. Well, I17:39 You mentioned one. I had heard most of the ones that19:22 Let's flip the table a little bit now. So, we've talked22:16 Yeah, I see that. You know, when you're talking about false25:27 I have a whole talk on that exact topic on developers27:14 I'm going to do something different here for the conclusion of29:35 Yeah. All right, you heard our key takeaways, so now it's