Michael Man

devsecops devsecops - london gathering security devops appsec sast security testing security assurance kubernetes iast dast sdlc webgoat owasp containers culture istio control plane devsecops pipeline automation cyber security application security michael man agile penetration testing static analysis code quality pipeline mman secrets security code analysis dast iast technology vault code analysis people shift left terraform aws bastion benjy portnoy container aquasec web security mman888 vulnerability management cmdb patching veracode opensource supply chain chris wysopal weldpond l0pht bruce mayhew top10 top ten codes quality programming ethics opa openpolicyagent policyascode cloud microservices k8s exams certification static code analysis threatmodelling model tutamantic k8 andrew martin matt turner packet rowan baker past talks slideshare chris rutter threat modelling threat modeling manchester anniversary dso tooling pen testing engineers roles process tooling example