TestGuild Security Testing Podcast

How has the Covid-19 pandemic affected the employment prospects of cybersecurity professionals? In this episode, Owanate Bestman, the founder of Bestman Solutions, will share his take on what you need to know to stay employable in troubled times. Discover areas of growth in security, what employers are looking for, and what skills you'll need in 2020 and beyond. Listen up!

Do you have to comply with the complex, time-consuming, and tedious process of preparing for a security audit? In this episode, Eric Martin from Vanta, a cybersecurity startup, will discuss automated security and compliance. Discover why security compliance is essential, and how automation can help you with SOC 2 audits and HIPPA compliance requirements. Listen up!

Identity needs to be at the core of a security strategy. In this episode, Alan Radford, CTO of One Identity, will share how to achieve security by ensuring the right people get proper access to the right resources at the right time. Discover how using RPA can help with your identity and access management efforts. Listen now!

Discover how to avoid blind spots in your DevSecOps with Wilson Mar. Wilson is a DevSecOps AI/ML leader, and in this episode, he'll share his insights on how to improve security in your DevOps efforts. Listen in to find out more about tools, techniques and best practices in security.

Want to know a fun way to learn cyber-security tips? In this episode, Greg Scott security expert and author of Virus Bomb and Bullseye Breach will share how to pick up security practices by reading novels. Discover how to secure stuff like the bad guys do, and how to avoid security breaches in your applications.

AI is everywhere, but have you ever thought about how it can impact security? Or how to test for AI-exposed security risks? In this episode, Dr. Arash Rahnama, head of Applied AI Research at Modzy, will share his views on the need for AI-embedded security and defenses. Discover how to avoid data poisoning, the emerging momentum around adversarial AI, and techniques to defend against it. Listen up!

Discover how to take over an enterprise network from the inside. In this episode, Royce Davis, author of "The Art of Network Penetration Testing: Taking over any company in the world", explains how a malicious invader can wreak havoc on your network and how to prevent it. Learn some foolproof penetration testing techniques, and the four phases that every security expert should know for planning and preventing attacks. Listen up!

Software development itself is changing rapidly, and security programs must evolve if they are to be effective in this next generation of software. In this episode, Cindy Blake, a Senior Security Evangelist at GitLab and author of 10 Steps Every CISO Should Take to Secure Next-Gen Software, will share what you need to know in these changing times. Discover fuzzing and the security implications involved in how software is changing; the code itself, the development methodologies, and the infrastructure. Listen up!

Hey, it's Joe I just want to let you know that the Testing Security Testing podcast is still around. We're only away for a few weeks. We'll be back shortly. I have a bunch of awesome interviews lined up already. Stay tuned for the Art of Network Penetration Testing the interview I did with Royce Davis and his new book. I'm also doing an interview with Cindy Blake from GitLab on DevSecOps to full maturity and a cool topic and data poisoning the emerging momentum around adversarial AI and the need for embedded security defenses, so just a flavor for a bunch of different new episodes coming your away. If you haven't already, why not like and rate us in iTunes and subscribe to the podcast. So you'll get updates once a new episode is released. Also, I'm always looking for guest on the show, so if you'd like to be interviewed on the show about a Security testing tip, tool, technique or best practice, or you want to nominate someone as a speaker or a topic you'd like to hear more about, drop me an email at Joe@ Testguild.com. So hang tight. We'll see you back here in a few weeks. And as always, test everything and keep the good.

Don't let your companies secrets accidentally get pushed to production and expose your company to security risks. In this episode, Harinee Muralinath, a Capability Lead, India at ThoughtWorks, and core contributor to Talisman, shares how. Talisman is a tool to detect and prevent secrets from getting checked-in in the first place. Discover how you can also scan your commits for potential issues. Listen up!