Name: OWASP San Antonio Chapter Qtrly Meeting-Oct 18th 2024 (Friday)
Start: 2024-10-18T11:00:00-05:00
End: 2024-10-18T14:00:00-05:00

**Container Security-A discussion**
**Details**
Topics- See abstracts below

* Containers 101- Optiv
* Security challenges and opportunities in containerization- Palo Alto
* From Reactive to Effective: Building Application Security that Works-Mend IO
* ***Protecting AI: The ultimate Game of Cat and Mouse:***
***Panel***-Moderator-Brandon Pinzon
Panelists: **Eddie Contreras- Frost**, Chris Lindsey-Mend, Joseph Gregorio-Frost.

**Lunch Provided**
Scuzzi’s Italian Restaurant - 4035 N Loop 1604 W #102, San Antonio, TX 78257
ZOOM link provided for remote attendees

**https://optiv.zoom.us/j/93311548515?pwd=8LlhRjVy4bmPCXRheXtLMe4EQ9KAJ2.1&from=addon**

We encourage everyone to attend in person. We will have door prizes and excellent food for all to enjoy, as you take advantage of this excellent networking opportunity!
Please feel free to pass this information on to your peers and team members.+

Please reply **“ONSITE”** if you plan on attending in person so we can finalize headcount for food and room attendance 😊

Social Hour after

**Presentations will include:**
***I. Containers 101-Optiv***
Container Security Best Practices and Tooling-Optiv

***II. Securing APIs in the Cloud: Insights and Best Practices- Palo Alto***
This presentation explores the security challenges and opportunities in containerization, emphasizing a defense-in-depth approach. We begin by discussing the widespread adoption of containers and the emerging trends driving innovation, such as serverless computing and hybrid/multi-cloud environments. We then examine key security concerns, including container sprawl, misconfigurations, and supply chain vulnerabilities. A defense-in-depth strategy, starting with shifting security left during development, followed by securing images at rest and implementing runtime protection, ensures comprehensive container security. By integrating cloud workload protection platforms (CWPP) with broader CNAPP strategies, organizations can safeguard containers throughout their entire lifecycle, from code to production

***III. From Reactive to Effective: Building Application Security that Works-Mend IO***

In 2023, 71% of enterprises admitted their AppSec programs were reactive, playing catch-up with vulnerability alerts -– while at the same time, applications remain the top target for threat actors. That adds up to increased business risk for a lot of companies and fuels an urgent need to improve application security strategies. But how?
The key is to move from a compliance-based approach to managing application risk.

**IV. Protecting AI: The ultimate Game of Cat and Mouse:**

Panel-Moderator-Brandon Pinzon
Panelists: Eddie Contreras- Frost, Chris Lindsey-Mend, Joseph Gregorio-Frost.

Joseph Gregorio

Brent Daugherty

Rodney Fielding

OWASP San Antonio

OWASP® Foundation 

Technology

Network Security

Hacking

OWASP

Information Security

Computer Security

Web Application Security

Web Security

Software Security

Application Security

Penetration Testing

**Speakers**

***Containers 101-Optiv***
Anthony Pipia has over seven years of experience in information security, spending most of that time working in the application security space. His experience ranges from performing web application assessments, to managing various application security programs. With a focus on development and automation, he has built automated solutions at various companies to support application security tooling and metrics.
Pipia also has experience as an educator, providing training on security topics. He has instructed a Cyber Security Bootcamp and has built and delivered secure development training for engineers. He leverages his teaching experience when working within application security teams and communicating with engineers and developers in the organization.
Prior to joining Optiv, Pipia worked on security teams varying from large tech companies to startups. He has had experience as a crucial member of a mature application security team, as well as the sole member and owner of application security at an organization.

**Security challenges and opportunities in containerization -Palo Alto**

Jonathan Brown is a Solutions Architect at Palo Alto Networks, specializing in Prisma Cloud. With over 15 years of experience in technology, Jonathan has a deep understanding of traditional enterprise architecture and the security challenges organizations face as they transition to the cloud. Before joining Palo Alto Networks, Jonathan worked as an infrastructure engineer in data centers and at Twistlock, a pioneer in Cloud Native Security for Containers, acquired by Palo Alto Networks in 2019. At Palo Alto Networks, Jonathan focuses on helping organizations secure their cloud environments through comprehensive security strategies and cutting-edge technologies.

***From Reactive to Effective: Building Application Security that Works-Mend IO***
Chris Lindsey is a seasoned speaker who has appeared at conferences, webinars, and private events. Currently building an online community and creating a podcast series, Chris draws on expertise from more than 15 years of direct security experience and over 35 years of experience leading teams in programming and software, solutions, and security architecture.
 
For three years, Chris built and led an entire application security program that includes the implementation of mature AppSec programs, including oversight of security processes and procedures, SAST, DAST, CSA/OSA, compliance, training, developer communication, code reviews, application inventory gathering, and risk analysis.

***Panel Moderator-Brandon Pinzon***
A seasoned leader at the forefront of AI and data security, Brandon Pinzon is an experienced Chief Security Officer, who leverages his 17+ years of experience across technology, banking, and insurance industries to guide organizations as a sought-after advisor.
He spearheads comprehensive security programs, encompassing not just traditional areas like cyber defense and data protection, but also the unique challenges of AI and data-driven environments. His expertise spans data collection, forensics, and crafting robust security and privacy strategies specifically tailored for heavily regulated industries. Brandon's ability to navigate complex data systems and collaborate with
multinationals to establish best practices is well-recognized within the industry, as evidenced by his frequent speaking engagements and guest lectures.

Panel Guest-Eddie Contreras
Edward has spent his career protecting companies and organizations from cyber risk and crime. He has guided companies through global breaches, cyber and digital transformation, and risk management. He spent 22 years in the Army as a signal Warrant Officer with deployments to combat zones and earning a bronze star in the process. His core expertise has positioned him to lead cyber teams at systemically important financial institutions while enabling business success with minimal risk exposure. He is currently the Sr. Executive Vice President and Chief Information Security Officer at Frost Bank in San Antonio, Texas.
 

Speakers- See Below 

OWASP San Antonio Chapter Qtrly Meeting-Oct 18th 2024 (Friday)

Scuzzi's Italian Grill

Share

OWASP San Antonio Chapter Qtrly Meeting-Oct 18th 2024 (Friday)

OWASP San Antonio

Details

Members are also interested in