Mikhail Advani & Rajesh Tamhane

Talk Title

DevOpSec: Rapid Security in the Cloud with AWS and CIS

Abstract

High performance teams are releasing software to production several times a day. This poses a challenge to Ops and infosec who need to have the confidence that these releases will not lead to a security breach in the infrastructure. DevOpSec or DevSecOps is a discipline where development, operations and security work collaboratively to achieve security compliance in agile teams. In this demonstration of our open source project, we show how we used DevOps and security best practices to achieve and test AWS infrastructure.

Speaker Bio

Mikhail Advani is a Consultant at ThoughtWorks India. He am interested in devops, testing and problem solving. He is also passionate about implementing his learnings to create open-source projects. Rajesh Tamhane is am a technologist and an agile evangelist with over 23 years of experience. He works as a Principal Consultant at ThoughtWorks. Hold the CISSP certification and have a broad experience spanning IT operations, information security, application development, project management and agile delivery. While being instrumental in IT transformation to support an agile organization, he has been a consultant to organizations in government, retail and banking verticals to build security into agile practices.