Russ Memisyazici is a DevSecOps engineer and cloud architect with over 30 years of experience in IT and cybersecurity. From coaching the US CyberPatriot teams to building the Virginia Cyber Range, he has had quite a varied career.

By the way, the pronunciation is: my-mish-yah-zuh-juh.

In this interview Russ shares his knowledge about:
– Cloud risks
– Future cloud technologies
– Thoughts on cyber certifications
– His personal journey in cybersecurity.

There is also advice for starting a DevSecOps career!

DevSecOps combines cybersecurity with traditional DevOps to help developers deliver secure apps. As a DevSecOps engineer, you need to be well-versed in both software development, IT operations, and cybersecurity. Whether it's application security assessments, cloud deployments, or coding, you'll need a broad range of skills. It's systems administration on steroids.

A common DevSecOps workflow would be to define your entire infrastructure and deployment cycle as code. Then you would automate the testing, security assessment, and deployment using a CICD tool like Jenkins.

DevSecOps staff are in high demand in the startup world. When it comes to building scalable infrastructure and deploying apps, DevSecOps people are the commandos of the tech world. It's a rapidly evolving field where terminology and technology change from one day to the next. Soon, the term "DevSecOps" might even be replaced by "GitOps."

But the most important thing Russ stresses is to focus on the basics. Basics like networking, scripting, or system administration don't change that much. The new, great technologies coming out all build on those skills. But to learn them, you have to read books and type the old-fashioned way.

00:00 Introduction – Aras /"Russ/" Memisyazici
01:36 What is DevSecOps?
04:10 Why is DevSecOps critical to cybersecurity?
07:24 Role of DevSecOps in securing infrastructure
10:04 What technologies and skills are important for DevSecOps?
13:04 How much does DevSecOps pay?
15:47 Roles and opportunities for DevSecOps
17:25 Books and resources for learning DevSecOps
23:20 What is the cloud?
27:57 What risks are associated with the cloud?
32:22 What is the future of cloud technology?
37:0 How important are cybersecurity certifications?
44:29 What is the value of cybersecurity programs?
50:10 What are the current deficits in cyber training?
55:50 Russ' personal cybersecurity journey
1:05:58 Contact Russ Memisyazici

LIKE and SUBSCRIBE

—– Resources —–

Phoenix Project, Gene Kim
https://www.amazon.com/Phoenix-Project-DevOps-Helping-Business/dp/0988262592

The DevOpSec Book, Jim Bird
https://www.oreilly.com/library/view/devopssec/9781491971413/

Practical Security in DevOps, Tony Hsiang-Chih Hsu
https://www.amazon.com/Hands-Security-DevOps-continuous-deployment-ebook/dp/B07FNXVKCH

Agile Application Security, Laura Bell
https://www.amazon.com/Agile-Application-Security-Enabling-Continuous/dp/1491938846

Workbook Site Reliability Engineering (SRE),
https://sre.google/workbook/table-of-contents/

The Site Reliability Workbook, O'Reilly
https://www.oreilly.com/library/view/the-site-reliability/9781492029496/

#DevSecOps #DevOps #Cyberspatial

Please take the opportunity to connect with your friends and family and share this video with them if you find it useful.