InnoTech Austin

For the past 12 months, Q2 has been on the journey of adding application security to the charter of our DevOps team. This has presented a number of challenges from organizational, talent development and interesting technical problems to solve.

In this session, I'll discuss the lessons we learned while tackling these challenges and the outcomes we've been able to achieve as a result.

- How to break down silos internally and externally
- The necessary feedback loops between policy development and technical enforcement and governance
- How to reduce technical debt in an Agile ecosystem
- How to secure tens of thousands of production container workloads
- How we approach API security and the gaps of traditional AppSec tools
- How to use automation projects to engineer ourselves out of operational churn