Potential new SIG joining the mix - the Agile Austin Security SIG ?
Matt Roberts
Gang:
I’ve been talking with a friend of mine, Bankim Tejani, who has in-depth experience in application security after working at Fortify/HP for the past five years. He has helped countless development teams adopt a strong security stance in their development efforts through both innovative product development and consulting. He is also has a passion for Agile and would like to contribute to the Austin community now that he’s really local (he gave up the life of a roadwarrior for a cozy little job with ServiceMesh as a Senior Security Architect). We’ve traded a few ideas around the need for something like this, and it seems that we have another big work-in-progress chunk with software not really being done until it’s actually secure. To me, this seems like another post-facto issue like DevOps and Documentation, and in the days of yore, QA.
His purpose would be specific to foster a community dedicated to making security a continuous process within the development lifecycle. I believe that this is a need for us, as more and more software is moving to a SaaS model where the credibility of the business can basically be wiped out in seconds thanks to malicious forces coupled with ignorance. Like many things, we are #BetterTogether, and this is another silo that I believe can be broken!
Here’s his LinkedIn profile http://www.linkedin.com/in/bankimtejani
I would be interested in folks’ feedback on this type of program, and we may have one of our informal get togethers over lunch with some of the SIG leads to discuss in early September.
All the best,
Matt Roberts