How to Make Security an Enabler Rather Than a Blocker for Engineering ft Jayesh Singh Chauhan
In today's fast-paced tech environment, cybersecurity has become an integral part of software development. Join Jayesh Singh Chauhan, Founder of Cloudurance Security and former CISO at CoinSwitch, in this insightful fireside chat hosted by The 403 Circle, powered by Astra Security, as we explore practical strategies to seamlessly integrate cybersecurity into engineering without compromising speed.
In this webinar, we discuss:
- Why secure engineering is essential for modern developers
- Transitioning from sporadic to continuous, integrated penetration testing
- Incorporating security into agile sprint planning effectively
- Simplifying threat modeling to secure products from design stage
- Hiring and nurturing security-minded engineers
- Implementing successful Security Champion Programs
Timestamps:
05:02 Introducing Speaker: Jayesh Singh Chauhan
05:57 Jayesh’s Journey from Coffee to Tea
06:53 Why Secure Engineering Is Essential for Developers
12:09 How Engineering Leaders Can Foster a Security-First Mindset
16:04 From Ad-Hoc Pentesting to Continuous, Integrated Pentesting
21:39 Open Source Tools for Continuous Pentesting in CI/CD Pipelines
25:00 Rapid-Fire Round Begins
25:44 What Keeps Jayesh Up at Night as a CISO
27:33 The Story Behind Jayesh’s First Email Address
34:34 A Day in the Life of a CISO
35:52 How Jayesh De-stresses and Importance of Meditation
38:00 Integrating Security into Agile Sprints without Slowing Development
41:22 Getting Started with Threat Modeling in Product Design
47:30 Hiring Engineers with a Security-First Mindset
52:16 Implementing an Effective Security Champion Program
55:27 Audience Q&A Begins
55:45 How to Bring Acceptance Mindset Among Engineering Leaders
58:04 Quantifying the Value of Security Tasks in Agile
59:54 Advice for First-Time CISOs in Their First 90 Days
Follow Jayesh on LinkedIn: https://www.linkedin.com/in/jayeshsch/
🔗 About Astra Security & The 403 Circle:
Astra Security offers continuous penetration testing and vulnerability scanning to secure over 700 global businesses.
https://www.getastra.com/
The 403 Circle is an exclusive Slack community of tech leaders like CTOs, CISOs, and engineering heads from leading companies worldwide.
👉 Join our exclusive community: https://www.getastra.com/the403circle-community-by-astra