Making Security Agile - Oleg Gryb - Saniay Tambe - AppSec California 2016
Channel: OWASP Foundation
Date: 2016-03-22

Many progressive IT organizations have already adopted agile methodologies and run in a CI/CD mode, while security processes and a level of security automation are still behind and can easily become a bottleneck if not changed.

We’ll show in our presentation how to convert the old approach to application security to a more progressive and a faster one. You will also learn how to extend a leverage of a small security team by utilizing QA regression unit tests for security processes. Achieving a greater level of productivity and security automation by utilizing open source and commercial tools will be also covered in our talk.

Oleg Gryb
Samsung Strategy and Innovation Center
Sr. Manager, Security Engineering
Oleg Gryb is Security Architect working in the application security domain at Samsung Electronics Innovation Center. He was previously Security Architect at Intuit, where he was creating architecture for mission critical financial and business applications. Gryb participates actively in creating open source software in a security, identity management and other domains. He has a lot of passion around embedding security to all SDLC stages, threat modeling, enforcing security in web service fabric, security tools, cloud, IoT and mobile security. He’s also interested in building data protection solutions based on security appliances, such as Secure Elements for devices, nCipher, DataPower, Ingrian, Safenet.

Sanjay Tambe
Samsung Strategy and Innovation Center
Security Architect
Sanjay Tambe is working as Security Architect at Samsung Strategy & Innovation Center.  He is working on security of cloud based SAMI Internet of Things (IoT) platform.  Previously he worked as Core Security Champion at Intuit, where he ensured security of applications such as Mint running in AWS cloud.  Prior to that he worked for Wells Fargo Bank as Security Specialist, VP where he ensured security of high volume customer facing web & mobile applications.  He is very passionate about application security using Architectural reviews and Security Automation. He conducted Security Training workshops for Architects, Developers, QA, and managers. He has 12+ years of experience in security domain and 12+ years of handson experience in design & development of software applications.
-

Managed by the official OWASP Media Project https://www.owasp.org/index.php/OWASP_Media_Project