Akash Mahajan & Sunesh Govindaraj

Workshop title:

Learn by Doing - DevSecOps on AWS using Cloud-Native Services

Abstract:

DevSecOps is changing enterprise IT the same way how DevOps transformed enterprise Dev. The complexity of operations is ever increasing and with the advent and extensive usage of Public Cloud, the risk is evenr greater.

We need to gear up for this world and a workable approach is to tackle this new world with the same enthusiasm as developers have taken up.

During this workshop, we will teach the audience how to use cloud Native Services such as Serverless (Lambda), Container run-times (Docker) and Container schedulers (ECS, Fargate) to enable near real-time detection and blocking of security attacks, analyze incidents and even do remediation of potential security holes before they become a problem. We will also demonstrate how can we create an informative security information related dashboard for the DevSecOps teams.

Bio:

Akash Mahajan, Co-Founder & Director Appsecco

An accomplished security professional with over a decade’s experience of providing specialist application and infrastructure consulting services at the highest levels to companies, governments and organizations around the world.

Now busy building a security platform for automating application security enriched with OSINT. The platform provides actionable security alerts and notifications to security analysts, product security teams and business owners. The stack is built entirely on Kubernetes and Cloud-Native Services.

An active participant in the international security community and conference speaker both individually, as chapter lead of the Bangalore chapter of OWASP the global organization responsible for defining the standards for web application security and as a co-founder of NULL India’s largest open security community.

Specialties: Running an application security consulting company; Building security automation products which are human-friendly; Founding and mentoring communities around the topics of Cyber Security, Entrepreneurship, Cloud Native

Sunesh Govindaraj

Sunesh Govindaraj is a Security Automation Engineer with Appsecco. He has a strong passion for Security and building solutions that would solve real-world security problems. Having nearly four years of experience in DevOps, Security and Web Application Development, he has worked on multiple web technologies and contributed to their DevSecOps cycle. Along that line, he has always ensured that security is given prime importance. He is also credited with vulnerability discovery in OpenSource products with CVEs to his name such as CVE-2019-16936, CVE-2019-16937, CVE-2019-16938, CVE-2019-16939, CVE-2019-16940.