Guests:

• Amber Shafi, Production Manager GSK
• Svetlin Zamfirov, Senior Platform Engineer at GSK
• Ivan Angelov, Principal Platform Engineer at GSK

Topics:

• Tell us about your team, what are you responsible for and how is the team setup to make that happen? What components of cloud security do you cover?
• Tell us about cloud misconfigurations and why these are different from on- premise misconfiguration?
• How are you discovering these misconfigurations?
• You've automated responses to misconfiguration. Beyond the obvious upsides of reducing team toil and time to response, what are the other benefits? Are there risk in this approach and how are they handled?
• How did this idea to automate come about, and what lessons did you learn along the way?
• How have you integrated with the cloud provider security tooling?

Resources:

• "Automate and/or Die?" (ep3)
• "Automating Response to Security Events on Google Cloud Platform" from GSK blog
• GCP security blog