Free and easy goodies to help bring more visibility and defensive capabilities to your product teams and AWS environment. — When we consider our current challenge as security teams; the main one, the one for me that’s always been prevalent, is that we often have some kind of us and them (them being everyone else in the business)mentality. It’s often there in the business too — Security at one point…

“What an opportunity to demonstrate the power of collaboration between security and engineering when building a product.” Head to any major security conference, be it B-Sides, BlackHat or DefCon you’re likely to come across a lock picking village. But why? Aside from the fact that it’s good to just sit and be still (see n number of posts on mindfulness), I truly believe lock picking provides a good ice breaker and an avenue…

A run down on how your Security Engineering / Application Security teams can support your incident process. — My favourite part; when we’re remediating issues during incidents we’re not just fixing the root cause, but also identifying other potential causes and remediating those too. Threat Modeling I really enjoy talking about threat models, they’re kind of like art to me. There are so many different ways to do them, they…

I recently read a blog from Azeria over at azeria-labs.com (@Fox0x01 on Twitter) on Deliberate Practice and Deep Work and it really stuck with me. …